Certification campaign
In short: A certification campaign is an organised round of access reviews run across many identities at once, usually quarterly or twice a year. Identity governance tools send each owner a list to certify or revoke, track completion and record every decision as audit evidence for later.
Which controls use this term?
- GOV-15Periodic access review. Review each agent's access at least quarterly, with its named owner confirming or removing every permission and tool.
Which terms are related?
Reviewed by The Register desk