Year: 2025
Type: article
Abstract: Identity Governance and Administration (IGA) relies on access certification to confirm that users possess only essential permissions for their assigned roles. The process supports the principle of least privilege while reducing security threats and ensuring compliance with standards like SOX, HIPAA, PCI-DSS, ISO/IEC 27001, and GDPR. Various access certification models, including manager-driven, privilege owner-driven, system owner-driven, and event-driven reviews, help organizations maintain security policies and meet compliance requirements. Challenges such as review fatigue, scalability issues, and inconsistent policies can hinder access certification effectiveness. Organizations should address these challenges through automation tools combined with risk-based prioritization, using AI-driven recommendations and ensuring integration across IT and HR systems. Optimizing certification processes enables enterprises to strengthen security measures while boosting audit preparedness and simplifying compliance management.
DOI: 10.55621/idpro.119
Author: Vatsal Gupta
Institution: Apple (United States)
Language: English
Topic: Access Control and Trust
Subfield: Sociology and Political Science
Field: Social Sciences
Domain: Social Sciences
Open Access status: gold
OpenAlex ID: W4408657241
FWCI:
Cites:
Cited by:
Related to: