We are very excited to announce that we will be rolling out a brand new feature called Remediation Advisor. With the help of this new feature, doing remediations will be much simpler. In its first version there will be recommendations on which roles can be deprovisioned from a user, which t-codes can be removed from a role and which roles need to be broken down. We also made significant improvements to the Online Reporting module which we released last month. Both of these features will continue to be expanding with new reports and new types of remediation recommendations and remediations will also be integrated to our Automated Provisioning module in the coming releases.
September 2017 release includes:
- Remediation Advisor
- User Remediations
- Role Remediations
- Online Reporting Enhancements
- Export to Excel and CSV
- Customize and save layouts
- Risk Descriptions (New view)
- Business Function Descriptions (New view)
- Mitigating Controls (New view)
- Various enhancements and bug fixes
The release is scheduled for September 22nd, 9:00pm EST. Feel free to email us at firstname.lastname@example.org if you have any questions.
Getting all the risk analysis results is just the beginning. Acting on cleaning up these risks is not a trivial task, which often requires business process changes. Our new feature will help you to clean the risks by categorizing the complexity and the impact so that you can focus on high impact ones that are easy to tackle and see an immediate reduction in your risk profile in a very short amount of time.
We have improved our Risk Snapshot job to check each role assigned to every user and determine if those roles are actually being used or not. If we determine that the authorization coming from that role has not been utilized during the period under review, we recommend the role to be removed from the use. This reduces the risks coming from the unneeded roles. The impact and difficulty attributes will help you prioritize your remediation efforts.
As part of the Risk Snapshot job, we also started to analyze the t-codes that are not being used by anyone. This help us to recommend list of t-codes that can be removed from the roles which also helps tightening up the roles scope. We also recommend the roles that have inherent risks to be broken down.
Online Reporting Enhancements
Export to Excel and CSV
Since we released Online Reporting module many of you asked for the ability to export these new reports to Excel. Our export to excel function will export the view data to Excel with a sheet that includes metadata like all the inputs and filters used to generate that data. This excel will also be digitally signed to ensure they cannot be tampered with without losing the signature. For the reports that have more than million rows the only export option would be a comma separated file due to Excel limitations.
Customize and save layouts
Although our reports are geared for most common use cases, you may want to customize them by selecting the columns you care about, which field to group by, sort and filter this data. With this new feature, we will allow you to save all these customizations as layouts and quickly switch from one layout to another. You will also be able to share your layouts with your colleagues by the import/export layout feature.
Risk Descriptions, Business Function Descriptions and Mitigating Controls
These are 3 new screens added under properties tab to give you more details about your risks and mitigating controls. In a future release we will be linking this information to various other views.
Various enhancements and bug fixes
- Secure Provisioning module has been renamed as Automated Provisioning
- Risk Name and Business Function Name columns have been added to the pivot table in WhatIf analysis
- Analysis Conflicts Screen for WhatIf now sorts by conflict source then by risk level
- Grids will show a different color funnel icon when a filter is applied to that column
- Security Roles Report will no longer include expired users and expired role associations
- In some scenarios Role Conflict Matrix had duplicate rows