Resources

Good reviews start
with good questions.

Checklists and explanations for the decisions behind access governance.

Orphan-account review checklist for IT teams

Use this checklist when an application account cannot be confidently linked to its owner. The aim is a defensible decision, not simply a smaller account count.

Explore FIELD GUIDE

Privileged-access review checklist

A privileged-access review asks whether each account has the right level of access for a current, documented purpose.

Explore FIELD GUIDE

Last active vs last login: reading access evidence

A timestamp is only useful when you know what event it represents. Last active, last login and SSO sign-in counts answer different questions.

Explore

Build your governance knowledge.

From IGA fundamentals to AI-tool access and service-account reviews.

PRACTICAL GUIDE

Identity Governance and Administration (IGA): A Practical Guide

Understand IGA, how it differs from IAM, and how account visibility supports ownership, least privilege and access reviews.

Explore PRACTICAL GUIDE

How to Run a SaaS User Access Review

A practical SaaS access review workflow covering account inventories, owners, privileges, activity, decisions and follow-up evidence.

Explore PRACTICAL GUIDE

AI Tool Access Governance: Accounts, Roles and Ownership

Review access to AI tools and connected services with a practical checklist for accounts, owners, privileges, tokens and offboarding.

Explore PRACTICAL GUIDE

Service Accounts and Non-Human Identity Access Reviews

Review service accounts and integration identities by ownership, purpose, permissions and lifecycle without confusing unmatched accounts with threats.

Explore PRACTICAL GUIDE