Control · ISM-0417
Privileged Access Lifecycle Management
Assessment of whether privileged access is granted, reviewed and revoked through a governed lifecycle.
LOWInsufficient Evidence
- Framework
- Australian ISM · 0417
- Domain
- Identity & Access
- Conclusion
- Insufficient Evidence
- AI Confidence
- 41%
- Missing
- Revocation logs
- Last Assessed
- Today 10:44
AI-Proposed ReasoningFor assessor confirmation
PreviewGrant and review processes are evidenced, but revocation activity cannot be confirmed from current sources. VERIDION will not assert effectiveness without evidence — the proposed state is Insufficient Evidence, with an evidence request recommended.
Evidence Request
PreviewAdditional evidence required to reach an effectiveness conclusion.
- Access revocation logs for the last 90 days
- Joiner-mover-leaver process attestation
- Quarterly privileged access recertification records
Demo workspace — detailed workflow coming next