Identity and Access Management

Dir Audit

Efficient Compliance Support
Analytics and Intelligence for Identity and Access Management
The Challenge
Cost pressure is combining with increased security needs
to cause enterprises and other organizations to look for
new ways of optimizing their business processes.
That is especially true in the observanceof complianceregulations such as those stipulated in the Sarbanes Oxley
Act regarding the reliability of the financial data publishedby enterprises. One way of providing efficient support forthese efforts is to roll out an Identity and Access Management (IAM) system with audit support. The sheer number
and types of regulations, however, pose a challenge:• Many different regulations exist today, and new ones
are mandated all the time, requiring continuous revision of IAM controls.

the identity store in an identity management component.
The audit trails and historical data produced by IAM components can help to answer the questions that auditors
ask to obtain proof of compliance. Until now, audit logs
and historical data from several applications had to beanalyzed to answer questions like “Who has accessedfinancial data in the last month?”, “Who gave the users
access rights for this?” and “Who approved these rights?”
Different audit formats, different user identities for thesame person and parallel timelines in the individual applications make such analyses very difficult and cost-intensive.

• The policy for what is audited depends on the particularregulation, the enterprise business model in force, andthe application creating the audit trail, making it difficult to establish consistent, end-to-end audit policies.
• Different regulations require different methods of analysis and reporting.
Audit data of IAM activities need to be produced thatcan be used to demonstrate accountability and reporton the results to demonstrate control of business processes on user access and entitlements as required byapplicable regulations. On a regular basis or on demand,reports must be produced on current status and history
on the information in the IAM repositories - for example,

Our Solution
DirX Audit provides auditors, security compliance officers andaudit administrators with analytical insight and transparency
for identity and access. DirX Audit complements the core IAM
capabilities for administration, authentication and authorization by providing means to analyze and report on IAM operations and deliver the information necessary to support IAM
governance and prove compliance.
Based on historical identity data and recorded events from theidentity and access management processes, DirX Audit allows

answering the “what, when, where, who and why” questionsof user access and entitlements. DirX Audit features historical views and reports on identity data, a graphical dashboard
with drill-down into individual events, a monitor for filtering,
analyzing, correlating and review of identity- related eventsand job management for report generation. With its analyticalfeatures, DirX helps enterprises and organizations to ensuresustainable compliance and provide business intelligence forthe identity and access management processes.

Delivering answers to auditors questions
Key Strengths
Activity Monitoring
DirX Audit collects and correlates
data about administration, authentication and authorization events fromdifferent IAM audit producers andthen transforms this data into intuitive and actionable intelligence withrespect to compliance regulations,business security policies and corporate risk management objectives.
Historical Data
DirX Audit maintains historical datafrom identity repositories to reveal
information about changes to identity and identity-related data overtime, allowing for historical review
of identities and point- in-time
comparisons to demonstrate progressive compliance to governanceprocesses, gain insight into identityand policy status or determine whyan access request was permitted.
Key Performance Indicators
Employing OLAP (online analyticalprocessing) techniques, DirX Audit
generates identity audit KPIs (keyperformance indicators) that provide
statistical information about audit
events and historical data for fast,interactive analysis and insight into
IAM operations.
Analytics and Intelligence
DirX Audit provides a Web-baseduser interface with specific views
that facilitates the correlation, analysis and reporting of audit and historical data by auditors, administrators,and security compliance officers.
Dashboard View
The Dashboard view provides a personalized collection of KPI charts.
Using the Dashboard, auditors canperform analyses, especially timebased trend analyses of selected KPI
data and then drill down to details
about audit events as necessary.

Your Benefits
Event Monitor View
The Event Monitor view provides
a convenient interface for filteringand correlating audit events. Using
the Event Monitor, auditors are able
to find answers to the “what, when,where, who and why” of user accessand entitlements.

Comprehensive Analyses

History View
The History View provides a view forbrowsing historical identity data.
Auditors can review historical data,
do point-in-time comparisons andcorrelate audit events with historicaldata.

Stores audit events from different
sources in a single or multiple database(one per tenant).

Reports
DirX Audit provides 100 pre-configured report templates in different
formats, including html, pdf, and MS
Excel. Auditors can set up scheduled
reports that will be sent via e-mail toselected recipients at regular intervals. Jaspersoft iReports technology
can be used to customize existing
reports or to create new reports.

Improve the effectiveness of security
controls.

Customizable User Interface

Simplifies analysis and reporting withthe advantage to drill down into detail.

Centralized

Cost-efficient

Fast and convenient insight into IAM
operations and historical data.

Expandable

Additional audit sources can be integrated.

Platform-independent

Support of several databases andserver platforms (including multitenant support).

Governance & Compliance Support
Analytics and Intelligence for IAM
DirX Audit
Manager
DirX Audit
Database

History Generator

KPI Generator

Administrators
Auditors
Compliance &Security Officers

Report Generator

Data Enrichment Services
DirX Identity
Collector

DirX AccessCollector

Audit
Plug -inAudit
Plug -in

DirX Identity

DirX Access

File/JMSCollectorDirX Audit
Services

Applications,Devices

Sustainable compliance and transparency for Identity and Access Management

Eviden is a registered trademark © Copyright 2023, Eviden SAS – All rights reserved.

FS-230605-GW-DirX-Audit_Factsheet-EN