I am reaching out to the community to see how others are handling their Endevor Access Reviews. As part of an audit control, we are performing them semi-annually. The current process however is very labor and administrative intensive. Our security team runs Top Secret Reports on all the Endevor Profiles (approximately 300). These reports are sent out to the application managers of those profiles to review and determine if the ID's associated within those profiles are appropriate or not. A spreadsheet is used to track when the reports were forwarded for review, and when they are returned. Deletes are processed based on those reply's by the security group managing Top Secret. ID's are suspended for 30 days then deleted.
Is there a more automated means within Endevor to produce access reports, or has someone developed a process integrating with Endevor or Top Secret that could simplify this review process?
Michael S. Grabski
Information Technology Services | Production Compliance & Controls
Office – 248-371-4297
Cell – 313-204-9282
Thank you for your input Dave. Much appreciated. I'll speak to our Information Security Group to see what they have to say.