CIMP Identity Governance & Administration Flashcards

Which IGA capability enables managers to approve or deny access requests through a structured workflow?

Answer: Request and approval workflow

Request and approval workflows route access requests to designated approvers, ensuring that access is granted only after proper business justification and authorization.

What is the purpose of a 'policy-based' approach to IGA?

Answer: To define and enforce rules that govern how access rights are granted, reviewed, and revoked

Policy-based IGA ensures that access decisions are driven by documented, consistent rules rather than ad-hoc judgments, improving governance and auditability.

In a CIMP context, what does a 'logical access control' system manage?

Answer: Digital access to systems, applications, and data based on identity and permissions

Logical access controls restrict access to digital resources based on authenticated identity and authorized permissions, as opposed to physical access controls.

What is the significance of an 'identity warehouse' or identity repository in IGA?

Answer: It serves as a centralized authoritative source of identity data used for provisioning and governance decisions

An identity repository aggregates identity information from authoritative sources like HR systems, enabling consistent and accurate provisioning and governance across the enterprise.

Which metric is most commonly used to measure the effectiveness of an IGA access certification campaign?

Answer: Certification completion rate and the percentage of access items revoked

A high completion rate ensures all access has been reviewed, while the revocation rate indicates how much inappropriate access was identified and removed.

What is a 'toxic combination' in the context of IGA Separation of Duties?

Answer: A pair of entitlements that together create an unacceptable risk if held by one person

A toxic combination is a specific SoD conflict where two access rights held by the same individual create a high-risk scenario, such as the ability to initiate and approve financial transactions.