A human hand touching a white security lock that has a digital holographic vault behind it.

Segregation of Duties (SoD) is being able to manage conflicting relationships between permissions in target applications. It provides a granular view of constraints based on business processes or resources. Once an SoD is defined, the appropriate actions can be taken by the assigned administrator or manager. In IBM Identity Governance and Security Intelligence (ISIGI), you can accomplish these tasks.

SoD in ISIGI:

Permissions scope can be defined per application.
A violation has the proper mitigation controls.
Administrator is Prompted Before Assigning Permission.
Violation is seen Real-Time.
Reports are easily accessible.

Permission Scope

ISIGI has the capability to select which applications to set an SoD violation. In the screenshot below, we can add or remove applications in scope.

Mitigation Controls

Mitigation Controls is a way for the administrator to see what actions need to be taken when the SoD is assigned to the user. Here is a list of a few out-of-the box mitigation controls that ISIGI offers. New mitigation controls can also be added based on business processes.

Administrator Prompts

With countless permissions per application, it will be difficult to keep track which entitlements are meant to be an SoD. ISIGI prompts the administrator that the permissions he is about to assign to the end user is a Conflicting Entitlement and it is violating a risk that was defined in ISIGI.

Additionally, the administrator can view the risk violation.

Violation in Real-Time

In cases where administrators assigned an SoD permission on existing users in a company, ISIGI indicates that the user has violated a risk with it's own indicator. ISIGI administrators can view this indicator.

The End User's Manager could view this indicator.

Accessible Reports

Reports can be accessed by administrators, user managers and an admin user that requires access. The users who have access to these reports can be configured in ISIGI simply by adding them to the proper Admin Role. Once added, these reports can be generated periodically or on demand. ISIGI's backend is DB2, hence creating custom reports is not a daunting task. This is an out-of-the box report that lists which users have violated the risks.

With ISIGI managing permissions and risks, your company can always be proactive with its compliance. If you do have any questions or additional features you'd like to see. Contact us and we will be glad to assist you.

Simplifying SoD Management with ISIGI's Granular Controls

Services

Solutions

Pricing

Resources

Events

About Us

Get Started