Audit and compliance
Access management you can demonstrate at an audit
A supervisor, an auditor or a customer wants to know who has access to what, why, and what has changed. Joinly runs access management from HR and records every grant and revocation.
How Joinly meets NIS2Laws and standards
What you have to demonstrate
What the law asks of your access management, and how Joinly meets it.
In Joinly
Where Joinly takes care of it
Every measure has a page of its own, with the screens.
- Lifecycle from HRCreating, changing and disabling accounts follows HR. When someone leaves, access ends on the end date.
- Roles and least privilegeAccess on department and job. Someone who changes jobs loses what no longer fits.
- Segregation of dutiesA conflicting combination of rights is held back and reported, with status and decision.
- Access evaluationWhat someone should have according to the model next to what they actually have. You see what will change first.
- Authorisation matrixPer department and job which access there is, ready to export.
- Role miningCleaning up accumulated rights: roles from the access that is there, and outliers in view.
- Logging and auditingFor every grant and revocation who, what, when and why. It cannot be changed.
For the auditor
The evidence is already there
What Joinly does, it records itself. At an audit you hand over, among other things:
- The audit log, also per identity, role and access item, which cannot be changed
- An export of the audit log through the API to your SIEM, such as Microsoft Sentinel, Splunk or Elastic
- All access per person with the reason for it
- Overviews in Excel or CSV, the segregation of duties conflicts overview and the authorisation matrix
See how the evidence comes about
In your free trial environment you see with demo data how lifecycle, roles and audit log together record what an auditor asks for.
No credit card, nothing to install.
Rather talk to someone first? Talk to an IAM specialist