Simplify Compliance Reporting

For more than a decade, government and industry bodies around the world have issued a growing number of regulations and mandates specifically requiring the security, integrity, and confidentiality of personal and corporate data.

All of these regulations share common access control requirements:

• control and enforce user access
• implement strong password policy, 
• incorporate strong authentication, 
• monitor all user authentication events, 
• automatically revoke access for unauthorized or terminated users, 
• provide reporting that confirms who has accessed what, when, how, and from where.

But demonstrating compliance with these controls has challenges because user access and user authentication activity is not contained in a single log file, but rather in silos of authentication systems that have their own audit trails and access logs - with no means to communicate with each other.

Gathering access data scattered through disparate systems is an expensive and time consuming burden on limited IT resources that must manually aggregate and track user access activity across disparate systems. This can be a complex process that often lacks clear visibility into all access events.

Imprivata OneSign Promotes Data Security
Imprivata OneSign reduces the time and complexity of demonstrating compliance with data protection and privacy regulations. First of all by controlling how your users access information in the first place using single sign-on and strong authentication. And, ultimately by tracking and consolidating disparate employee access events. These powerful capabilities allow organizations to rapidly respond to audit inquiries with real-time, aggregating views of when, how, and from where an employee gained access to your critical data.

From a single, Web-based administrator’s console, you can push a button to receive reports on password sharing, what applications users are authorized to access, what they are actually accessing, and what credentials they are using. When users separate from the organization, OneSign can demonstrate that access--across all user accounts—has been revoked.

Imprivata OneSign simplifies compliance reporting by:

• Monitoring and tracking all desktop, network, application, and transaction access activity in a centralized log file.
• Delivering real-time aggregated reports on employee access – available with the push of a button – that demonstrate compliance with access control requirements common to many regulations, including:
• Who has been authorized to access a system
• Who has actually accessed a system
• Who is sharing passwords
• Validate that all system access has been revoked for terminated employees
  

Click for information on the entire OneSign platform including OneSign Authentication Management and OneSign Single Sign-On and more on compliance reporting.