What Do Users Access

Continuous Auditing

The Contouring Engine® adds a whole new dimension to the process of monitoring and role building and refinement—the ability to learn exactly what it is that people access in the course of performing their daily tasks, a heretofore unrealized potential. During this learning process, the Contouring Engine® continuously observes what resources each identity is utilizing and records activity patterns within the individuals profile (contours). This establishes a true picture of actual requirements for every user. This knowledge across all of your enterprise platforms can provide invaluable for establishing new roles and refinment of the same as time marches on.

The Contouring Engine® accomplishes this learning activity by passively collecting and parsing activity data from existing log files associated with platforms, applications or alternatively through the application of an API or triggers if appropriate. Taking guesswork out of role development, this process learns what resources each identity needs enabling managers to make informed decisions with regard to who should be assigned the role and what resources should the role entitle individuals to access without fear that current operations will be impacted. This can be a significant factor in reducing or eliminating the interview process when embarking on a role engineering effort, thereby producing a significant ROI that previously was rare in compliance and security initiatives.

The Prodigen solution delivers many key elements relative to "What Do People Access":

• Individual profiles of what each identity actually access across multiple platforms
• The ability to produce a "Gap analysis" identifying excessive access rights when combined with the "What Can" a user access
• Automated Entitlement reviews containing information about resource entitlements that are not being exercised (Proactive method of encouraging adherence to "Least Access")
• Role Engineering with intelligence about "What Can" and "What Do" users access
• Audit and Attestation capabilities wherein you can validate that your controls are effective
• Security and alert capabilities geared toward the recognition of unusual behavior