10.6 Detecting and Remediating Violations in Published Data

Identity Governance enables you to check your collected and published data using data policies. In addition to looking at statistical information, you can also take remediation action for data policy violations (anomalies) in published data by:

  • Sending an email notification

  • Reviewing items in violation or in other words creating a micro certification or focused reviews

  • Creating change request

Once a micro certification is complete or once a change request has been fulfilled, you can recalculate the number of data policy violations. For more information about micro certification and fulfillment, see Section 21.3, Understanding Micro Certification and Section 28.0, Instructions for Fulfillers.

If after the initial remediation type selection, administrators would like to change the remediation type for future violations then they can select the link under the Remediation column on the Data Policy page and edit the remediation setup.

To remediate data policy violations:

  1. Log in as a Global or Data Administrator.

  2. Select Data Administration > Data Policy.

  3. Select Publication Data Policies tab.

  4. Select Set Remediation.

  5. Select Remediation Type.

    1. (Conditional) If you selected Email Notification, select Email source and specify a user or group as the recipient of the email.

    2. (Conditional) If you selected Change Request, select violation types, and provide instructions for fulfilling the change requests generated for selected violation types. Based on your policy type, additionally select Modify or Remove.

    3. (Conditional) If you selected Micro Certification, configure the following settings:

      • Review Definition: Search and select a review definition from the selection dialog or specify the review definition name. Note that Identity Governance applies filters based on data policy and enables selection of only relevant review definitions.

      • Review Name: Specify a name for the micro certification.

      • Start Message: Specify the message that will be displayed in the header area of reviews describing why the review was started.

      • Review Period: Leave this blank if you want to use the duration specified in the review definition. Otherwise specify a duration.

  6. Select the Run Remediation on new violations when calculated check box to automatically run remediation after saving your remediation setup.

  7. Click Save.

  8. To run remediation, select Actions > Run Remediation.