It’s time to recharge your access compliance program
Post by Glenn Folkes, Regional Sales Director
In the current environment the push for operational continuity has resulted in an unspoken agreement between the business and IT that compliance can wait until later.
It is pretty obvious why you’d do that.
As businesses rushed to allow huge numbers of people to work from home, IT have just undertaken a massive reset across access, infrastructure, security and many other domains.
Policies once set in stone, have been massaged or replaced, in some cases with elegant (or not-so-elegant) workarounds. There’s no question that companies had to make pragmatic decisions and relax their risk tolerance.
While compliance often gets a bad rap, in this case re-examining those elegant workarounds is exactly the right thing to do now.
Regulations exist for a reason – they help protect your business, your employees, and your customers. Failing to adhere to regulatory requirements can open you up to risks beyond just fines. Info Sec regulations exist to help protect against a data breach and financial regulations are there to protect against fraud.
A compliance review right now might seem like a step too far but being prepared for your next round of compliance audits is exactly the right thing to be doing.
Our expertise is in User Access Reviews and our first step would be to take a comprehensive baseline audit of access to your critical systems and information. This compliance baseline will allow you to identify where your problems lie.
You’ll have the information to quickly identify access anomalies and examine the security policies and procedures that caused them.
Once you identify your weaknesses, compliance gaps, or problem areas, then you can put best practices back in place.
During times like this, even an in house compliance review will give you validation that the processes you’ve put in place stand up to scrutiny. The alternative might be that the malicious actors find the weakness before you do. I know what I’d prefer.
As always, I’d be happy to chat. Enjoy your week ahead.