Should we use the standard SoD Rules provided with Risk Analysis & Remediation?

Should we use our own SOD rules or take the standard Rules provided by the Risk Analysis and Remediation tool?

There are good reasons to go either route, though we would generally advise on taking the standard rules as the starting point.

  • Dependent on what the timescales / objectives are – limited or for continuous compliance.
  • Always recommended to customise standard Ruleset to your business environment.

To discuss this in more detail please get in touch, and we can either assist your team in preparing a Rules management plan or just provide some simple pointers.