1.5 Auditing, Reporting, and Complying with Regulations

Identity Manager has an inbuilt auditing service that captures a complete trail of events that occur in your Identity Management system. All of your user provisioning activities, past and present, are being tracked and logged for auditing purposes. The auditing system also captures data generated by its workflow and policies. By combining this data along with identity data, you can have all the required data to address any identity and access-related audit queries.

Identity Manager reports on both historical data and the current state of the provisioning environment. Using Identity Manager you can retrieve all the information you need to ensure that your organization is compliant with relevant business laws and regulations. Some of the identity data captured by Identity Manager includes user identity profile history, user group membership history, user resource access, and fine-grained entitlement history.

Identity Manager provides standard reports that let you perform queries against the information warehouse to demonstrate compliance for business, IT, and corporate policies. You can also create custom reports if the predefined reports don’t meet your needs. Custom reports may include the modification of a standard report or the creation of a unique report using the audit and log data.