TheFence UAR Plus

TheFence UAR Plus is an AI-powered work-flow automation technology: an intuitive and automated user access review practice that supports line managers and data owners to make educated and accountable decisions with an AI co-pilot. It ensures continuous audit-ready compliance, mandated by regulations such as SOX, HIPAA, GLBA, PCI, NYDFS, SOC2, or NIS2. TheFence UAR Plus simplifies and strengthens user access reviews by automating the entire process while providing risk-based AI recommendations to support data owners in making smarter, more secure decisions. How does TheFence UAR Plus work? With seamless integration capabilities, user and access profile data can be automatically imported from existing systems. Alternatively, data from custom applications can be manually uploaded in CSV format. Our solution prepares and cleans the uploaded identity data (e.g., filling missing data owner details) for a streamlined process. Once the data is ready, review requests are efficiently sent to approvers for action. Comprehensive functionality is provided for the entire User Access Review process. This includes source data preparation, administration, notification, ticket creation, and post-review activities. The IT Security professional logs into their own tenant in the SaaS environment. A central management screen displays an overview of the current and previous UAR tasks. They can open a new UAR process and select which integrated systems need to be included. HR employee data with organizational data is needed and can be imported via API or uploaded from a CSV file when there is no HR connection. With seamless integration capabilities, user and access profile data can be automatically imported from existing systems. Alternatively, data from custom applications can be manually uploaded in CSV format. Our solution prepares and cleans the uploaded identity data (e.g., filling missing data owner details) for a streamlined process. Once the data is ready, review requests are efficiently sent to approvers for action. Data owners are informed and can log in to see their employees data for approval. They are supported with an AI co-pilot that provides proposals for approval or denial decisions, thereby saving a significant amount of time. AI proposals are based on the users status, activity and riskiness. User removal/access modification tickets based on these decisions can automatically be generated and tracked, along with the execution of access or user removals. The IT Security professional can manage the entire process end-to-end, from initial data preparation to checking the removal of revokable accesses. The UAR process we have implemented in our SaaS solution aligns with best practices and adheres to international security standards and regulations.