New Feature Allows Businesses to Save Time, Improve Compliance Audit Outcomes, and Build Auditor Confidence
PORTLAND, Ore. – Dec. 3, 2024 – ConductorOne, the modern identity governance platform, today announced support for data accuracy reporting for user access reviews (UARs) to simplify compliance audits and ensure accurate, auditor-ready data. In conjunction with ConductorOne’s existing UAR and risk detection capabilities, the new functionality streamlines the entire compliance audit process, saving time, improving audit outcomes, and building confidence with both internal and external auditors.
“Accuracy is a critical factor for user access reviews. For compliance, the ability to prove accuracy helps teams give auditors the evidence needed to ensure audits go smoothly for everyone. When used for security, accurate UARs make it easier to spot risks before they become issues,” said Alex Bovee, co-founder and CEO of ConductorOne. “With this new functionality, we’re helping teams and auditors succeed by providing them with the tools they need to drive better outcomes for both compliance and security.”
ConductorOne now automatically surfaces the status of UAR campaign data sources when campaigns are scoped, allowing users to easily verify the accuracy of in-scope data before a campaign begins. If a data source has an issue, like a connection error or stale sync date, users can remediate the issue directly with the click of a button. Additionally, ConductorOne includes the accuracy status of each data source in its comprehensive, exportable audit reports and makes full data extracts available to auditors for reconciliation. This gives users the ability to proactively identify and fix accuracy issues prior to launching UARs, as well as to provide verifiable evidence of UAR data accuracy for internal and external auditors.
Closing the Accuracy Gap in Compliance Audits
Many compliance frameworks, including the Sarbanes-Oxley (SOX) Act for publicly traded companies, require UARs to be run on a regular basis to remove instances of overprivileged, inappropriate, or unused access. However, while automation has significantly improved the efficiency of running UARs, validating the accuracy of data used in these reviews is still a manual and time-consuming process that frustrates both teams and auditors. In fact, most businesses still use manual screenshots to validate data accuracy.
ConductorOne’s auditor-ready data accuracy reporting modernizes this historically manual workflow by automatically capturing the evidence auditors need to prove UAR accuracy. The feature allows auditors to validate that all application connectors and data sources are functioning properly, and that the data used for a campaign is up to date and accurate. For more granular detail, ConductorOne provides full access to timestamped data files, should further investigation be required.
Auditor-ready data accuracy reporting is now generally available as part of ConductorOne’s Access Reviews product. To learn more, read our blog post or book a demo.
About ConductorOne
ConductorOne is the modern identity governance platform that makes it possible to move beyond the limitations of legacy IGA and reduce the identity attack surface with confidence. Designed for flexibility, ConductorOne provides a broad range of direct connectors to integrate with cloud, infrastructure, on-prem, and homegrown tools. The platform’s Access Fabric brings together previously siloed access and permissions data from across a company’s environment. This provides real-time visibility and dynamic access controls that allow businesses to reduce identity risks, move to just-in-time access, automate access reviews, and manage the full identity lifecycle. The platform delivers intuitive user experiences that help teams get up and running faster, using powerful automation backed by AI to significantly improve productivity. ConductorOne is trusted by forward-thinking enterprises like DigitalOcean, Instacart, NFI, Ramp, and Zscaler. For more information, visit conductorone.com.
# # #
Media Contact:
Andrew Smith
Public Relations for ConductorOne
