Introducing Findings: Prioritize, Act, and Automate Identity Risk Management
We are excited to introduce the Findings feature within the IAM Risk Analyzer, a robust enhancement designed to help users identify, prioritize, and act on risks based on aggregated insights. With Findings, organizations can tailor their risk management workflows, ensuring a focused and actionable approach to mitigating identity and access risks.
With Findings, you can:
Aggregate Insights into Actionable Alerts
Focus on what matters most: Combine system-generated and user-defined insights into prioritized findings.
Gain detailed context: Understand the “why” behind each finding with detailed insight descriptions and risk scores.
Assign risk ratings: Customize risk levels for findings to align with your organization’s priorities.
Example Finding:
A user with weak MFA credentials and a SoD (Segregation of Duties) violation accessing critical resources.
Automate Risk Responses with Playbooks
Streamline mitigation: Link findings to automated workflows using playbooks.
Define escalation paths: Notify stakeholders, suspend accounts, or initiate access reviews when high-risk findings are detected.
Proactive actions: Ensure quick and effective remediation of security risks.
Example Playbook:
Automatically notify the user’s manager and disable access if a finding related to weak MFA remains unresolved for two days.
Customize Risk Identification with Finding Rules
Tailor to your needs: Define logical expressions combining multiple insights to generate findings.
Flexible filters: Use entity filters to refine conditions based on identities, resources, or connections.
Dynamic risk assessment: Combine medium-risk insights into high-risk findings for cumulative impact analysis.
Example Finding Rule:
Generate a high-risk finding for users with both weak MFA and privileged access to financial systems.
Enhance Visibility with a Unified Dashboard
Centralized monitoring: View all findings in one place, categorized by risk level, entity type, or timeframe.
Drill-down capabilities: Explore the insights contributing to each finding with in-depth details.
Visualize risk: Track trends and identify areas requiring immediate action.
For more detailed information, please refer to the support docs: IAM Risk Analyzer Findings Documentation.
Reach out to our support team ([email protected]) for any help or assistance.
Was this helpful?