Analytics andIntelligence
Data-driven risk management for Evidian IAM system
Security and compliance are daily issue whenit comes to Identity and Access Management.
In an increasingly risky environment forcorporations, CISOs and Administrators needenhanced processing and analysis capabilities
to leverage and review data produced by their
IAM systems and investigate security events
related to users’ lifecycle and entitlements
usage.
Evidian Analytics and Intelligence transforms
access and identity raw data into actionable
intelligence in line with compliance regulations,business security policies and corporate risk
management objectives. Security professionals
can now track down and analyze access data to
extract trends to report and act to improve theirright assignment management policy.

Take up the security challenges and get full control over your Identity and Access Management system.
Evidian Analytics and Intelligence• Transform raw data into useful intelligenceto identify trends and run more accurate
risk-analysis.
• Investigate the root cause of audit eventswith the risk-oriented dashboards and views
with the advanced filtering capabilities.
• Meet with auditors, security managers andbusiness managers for better governanceand regulatory compliance.
• Read and communicate clearly with thecustomizable web interface, dashboards,
reports and on-demand displays (ad-hocviews).

An add-on for Evidian IAM suite
Developed for middle-sized and largeorganizations benefiting from Evidian IAM,
Evidian A&I adds a new critical tool to yoursecurity solution enabling you to follow theevolution of your system by covering different
domains from the users’ lifecycle.

From data to trends
Evidian A&I highlights evolution trends foraccesses and entitlements. This overall
view allows security professionals to detectsuspicious events and take a risk-driven
approach to IAM.

Comprehensive analysis tool
The multidimensional analysis allows security
professionals to go deeper into detail andfocus on a specific indicator. This search canbe extended to the audit events involved withthis indicator. The user can also customize
the dashboards to better answer his/herorganizational needs (the possibility to add
logo, images, website, reports or on demand
displays, etc.). This search can be extended tothe audit events involved in this indicator.

Advanced audit features
To be able to broaden the search domain andanswer any type of question, the Audit Analysis
feature makes it easier to investigate by looking
directly into audit events via a user-oriented
layout and advanced filtering capabilities.

Proofs of complianceWith the implementation new data protection
laws such as the EU’s GDPR, the regulator
will require organizations to show proofs ofgovernance and keep records of any event orchanges regarding the processing of personal
data (e.g. change in roles, access entitlements,etc.). Evidian A&I is the perfect tool to mitigate
risks of breaches and demonstrate that you arecompliant and able to track down and report onaccess event and usage.

Enhanced risk analysis and governance
Access and entitlement usage analytics
Access events (failed authentication,authentication methods, application andpermission usage, etc.) are included in theproduct scope as new dimension for IAM audit
events analysis and monitoring. Evidian A&I
places data at the heart of business processes,
ready to be investigated by the Security Officer.
Entitlement usage monitoring enables fasterand efficient decision making.

Flexible domains creation
It is possible to request changes and create
new domains more in line with your business.
The new domains will be specific to theentitlement policy defined in your organization.

Dashboards
Dashboards highlight the key performanceindicators of your business, providing statisticalinformation on a relevant domain. They arepresented in the form of easily modifiablegraphs. The same way, it is also possible toconfigure the refresh rate of the data.

Reports
The reports detail the information presented in
the dashboards. Reports are available directly
and can be customized, among other things,according to time ranges, organization orapplication names; they can be generated
periodically and sent automatically by mail.

On-demand displays
On-demand displays, also called ad-hoc
views, are the basic elements of dashboards.

They focus on a given performance indicatorand allow its detailed analysis by playing on
different dimensions. Thus, it is possible toeasily and very interactively position different
filters or dimensions to obtain the highlightingof the information sought. The result can bepresented as chart or in tabular format.

Audit analysis
The audit event analysis function provides
a business-oriented view of the audit events
generated by your Identity and Access
Management system, to find the root cause ofan anomaly. The ability to filter according to thestart and end dates of an event, its category,
type, or other criteria is enhanced by the ability
to filter also all the correlated audit events, and/or to obtain detailed information about theconcerned users or objects of the policy.

Fine-Grained Access Control
Evidian Analytics & Intelligence allows you todefine a central auditor with access to all data
in dashboards, ad hoc views and reports. But it
is also possible to set up a context to limit data
access to a local auditor. In addition, this notionof context can apply both to users, but also toapplications or roles...

Key Risk Indicators
The product allows you to monitor activities
considered to be at risk (e.g. password changes,
failed authentications). Whether done by auser or an administrator, you can detect themand analyze why this happens (root cause).
A set of risk-oriented dashboards and adhoc views strengthen the existing range ofFor more information: Evidian.com© Eviden. Evidian is the registered trademark of Eviden. All products, brand names, service marks, trademarks and othernames mentioned in this document are proprietary to their respective owners and are protected by applicable trademark
and copyright laws. Evidian reserves the right to modify the characteristics of its products without prior notice.
CT_210319_JR_ANALYTICS-AND-INTELLIGENCE-FACTSHEET-EN

analysis tools. Administrators can focus on user
authentications, user authentications risks,
users with SoD violations, etc.

Detect trends
Evidian A&I allows you to monitor and analyze,
using different criteria, and the usage trends ofyour IAM system. This vision over time of thekey performance indicators of your businessallows you to detect atypical behaviors (e.g.
repeated requests for exceptional rights for auser) and react accordingly.

Optimized costs
The Evidian IAM Suite allows you to manage
and secure access to Cloud applications
while mastering the costs. Accounts for Cloud
applications are created dynamically, at thetime the user requests access. A&I gives you
the means to verify inscriptions to Cloud
applications and verify that the costs that are
invoiced correspond to your usage.

Integration with Nagios®
Evidian Identity Analytics and Intelligence
includes deep integration capabilities withNagios®, free and open source application, tooffer extensive alerting services for applications
and services. Added to Evidian IAM Suite, thisproducts integration enables organizations
to quickly detect and respond to suspicious
events and network threats.