Certification campaign configuration
|
Access certification feature
This page describes configuration of Access certification midPoint feature.
Please see the feature page for more details.
|
This section describes access certification campaign configuration options.
For every access certification campaign, you define its scope, stages, reviewers, a strategy for computing the campaign stage results, etc. Every time you create a campaign definition, you in fact configure an access certification campaign template. Any future instance of the campaign definition is based on the template.
The materials in this section are organized by the individual configuration aspects they cover.
Certification campaign configuration options
Beside the basic campaign configuration outlined above, the configuration options are much deeper. Refer to the following articles for options to configure scope, stages, GUI, or reporting.
| Page | Description |
|---|---|
This article describes certification campaign template configuration options. |
|
This article describes access certification campaign scope definition, i.e., an algorithm to select objects and targets to certify. |
|
This article describes how to configure individual stages within an access certification campaign. It covers the reviewer selection, deadlines, notification behavior, and timed escalation within each stage. |
|
This article describes the global access certification configuration concerning all campaigns regardless the template on which they are based. |
|
This section describes options for configuration of certification campaigns in the GUI. |
|
This article describes what escalations are, how to use them in campaigns to enforce accountability, ensure higher scrutiny for risky items, and prevent stalled certifications. |
Compliance
This feature is related to the following compliance frameworks:
-
ISO/IEC 27001 5.2: Information security roles and responsibilities
-
ISO/IEC 27001 5.19: Information security in supplier relationships
-
ISO/IEC 27001 5.20: Addressing information security within supplier agreements
-
ISO/IEC 27001 5.21: Managing information security in the ICT supply chain
-
ISO/IEC 27001 5.22: Monitoring, review and change management of supplier services
-
ISO/IEC 27001 5.31: Legal, statutory, regulatory and contractual requirements
-
ISO/IEC 27001 5.36: Compliance with policies, rules and standards for information security
-
ISO/IEC 27001 6.3: Information security awareness, education and training
-
ISO/IEC 27001 6.6: Confidentiality or non-disclosure agreements