IAM Governance, Risk and Compliance: video thumbnailComing to the IAM Membership
#7Core lessonsStage 2 · IAM Analyst

IAM Governance, Risk and Compliance

Understand access reviews, segregation of duties and audit evidence.

Stage
IAM Analyst
Level
Intermediate
Format
Video lessons

About this video

This SkillsBuild video course explains the governance side of IAM: how organisations show that access is appropriate and under control. It covers access reviews, segregation of duties and audit evidence, which analysts are often asked to support well before they move into a governance role.

What you'll learn

  • Why auditors and regulators care about who has access to what
  • Running user access reviews and certifications that mean something
  • Segregation of duties rules and how conflicts are detected
  • Core identity controls: provisioning, deprovisioning, MFA and privileged access
  • Collecting audit evidence that is complete and easy to follow
  • How SOX, ISO 27001 and data protection laws relate to identity
  • Handling exceptions, risk acceptance and remediation

What's included

  • Clear explanations built around workplace examples
  • A walkthrough of a sample access review from launch to sign-off
  • Examples of strong and weak audit evidence
  • Practice questions with example answers

Who it's for

  • IAM Analysts who support audits and access reviews
  • Learners interested in identity governance as a specialism
  • IT and compliance staff who work alongside IAM teams

By the end, you'll understand the main identity controls and how to show auditors they are working.