Determine

– ‘Who has access to what’

– ‘If people have the right access for their job’

• Demonstrate compliance to auditors

– RBAC Model

– Recertification of Entitlements

• Efficient User Access Process

– Assign access based on ‘business roles’

– Simplified process for creating and managing roles

• Clean up orphaned accounts, legacy system accounts and access outside roles

• Audit critical access rights on existing systems