From 100 to Zero: Fixing Access Recertification the Right Way | Analyst Chat 289 скачать в хорошем качестве

From 100 to Zero: Fixing Access Recertification the Right Way | Analyst Chat 289

Access recertification is one of the most disliked processes in Identity & Access Management, and for good reason. In this episode, Matthias Reinwarth and Martin Kuppinger challenge the way organizations approach access reviews. Instead of endlessly optimizing broken campaigns, they ask a more fundamental question: What if we eliminated most of recertification altogether? Key topics: ✅ Why traditional access certification campaigns fail ✅ How overengineered role models create complexity and “rubber stamping” ✅ Why 80–90% of entitlements can be automated via policy ✅ How time-limited access dramatically reduces review effort ✅ Where AI and usage analytics can safely remove unused permissions ✅ Why static entitlements and standing privileges are the real root cause ✅ How modern authorization (e.g., externalized policy models) changes the game 00:00 Introduction to Recertification Challenges 02:44 Understanding the Complexity of Access Models 05:26 The Role of Automation in Recertification 07:59 Data Quality and Process Optimization 10:56 Time-Limited Access and Its Benefits 13:48 Leveraging AI for Improved Access Management 16:29 Addressing Static Entitlements and Their Risks 18:59 Future Directions in Authorization Standards The discussion also touches on the 50-year legacy of IBM RACF and why we still haven’t fully embraced externalized authorization — despite knowing better since 1976. If you struggle with 70-page access review PDFs, role explosion, or endless recertification campaigns, this episode offers practical, implementable guidance — much of it possible with capabilities you already have in place. Subscribe to our podcast! Apple Podcasts: https://podcasts.apple.com/podcast/ku... Spotify: https://open.spotify.com/show/3leKXJ9... Deezer: https://www.deezer.com/us/show/1848172 TuneIn: https://tunein.com/podcasts/Technolog... info@kuppingercole.com www.kuppingercole.com Follow us on social media: Facebook:   / kuppingercole   Twitter:   / kuppingercole   LinkedIn:   / kuppingercole   Instagram:   / kuppingercole