Concepts
Campaign, policy, scope, challenge, remediation.
-
01
Audit Trail — verifiable proof
Machine translationAn application log helps an operator understand a technical incident.
Verified -
02
Authentication
Machine translationREVIEWIT is its own authentication authority: the client retains its identity provider, and the product reserves the right to decide what it accepts as proof of identity—and…
Verified -
03
BEACON — the distribution of the audit trail
Machine translationBEACON is the distribution channel for REVIEWIT audit events to customer tools: SIEM, object storage or API consumer.
Verified -
04
Delegation
Machine translationDelegation allows one person to make review decisions on behalf of another — and requires that this transfer of authority be motivated, time-bound, attributed and retained.
Verified -
05
Integrated guidance — learning as you go
Machine translationA governance solution can be rich, coherent and powerful, yet still difficult to adopt if everyone must first learn on their own where to start, what action to take and what that action implies.
Verified -
06
Metering
Machine translationMetering is REVIEWIT's system for measuring consumption.
Verified -
07
Multi-platform governance
Machine translationAn organization never entrusts all its access to a single technology.
Verified -
08
Platform health — noticing silence
Machine translationA process that fails writes a line. A process that stops running writes nothing. The whole difficulty of supervision lies in this gap: the most costly failure is the one that…
Verified -
09
Remediation
Machine translationAn access review does not only produce verdicts.
Verified -
10
Retention
Machine translationRetention is not about applying the same duration to an entire database.
Verified -
11
REVIEW Center — the reviewer's space
Machine translationThe REVIEW Center is where a person reviews the accesses they are responsible for and makes decisions — the only place in the product where a review decision can be made.
Verified -
12
REVIEWIT INSIGHTS — understanding successive campaigns
Machine translationA report proves that a review has taken place.
Verified -
13
RITA — the access review assistant
Machine translationRITA answers in natural language the questions you ask about your reviews — where are my campaigns, who is late, what should I look at first — and never takes part in the decision.
Verified -
14
SEAL — the cryptographic perimeter of trust
Machine translationSEAL is the service that concentrates the sensitive cryptographic operations of REVIEWIT: storing secret references, deriving values, signing seals, governing key generations, and authorizing their destruction.
Verified -
15
The alerts center
Machine translationThe Alerts Center transforms a stream of technical events into a list of prioritized problems, each with its consequence, age, scope and the page where to fix it.
Verified -
16
The audit trail
Machine translationThe audit trail records what happened in REVIEWIT — who did what, when, on what, and with what result — in a form that can be shown to have not been tampered with afterwards.
Verified -
17
The authorization model
Machine translationThe identity provider — Entra ID, Okta, Google, ADFS or another IdP — answers one question: who has just authenticated, and with what level of assurance? REVIEWIT answers the…
Verified -
18
The Email Factory — mastering review communication
Machine translationA campaign only produces value if the people concerned know they must act, understand what is expected and can return to the right contact.
Verified -
19
The sanctuary
Machine translationThe Sanctuary allows a resource to be removed from the scope of access reviews — and requires that this exemption be justified, dated, attributed and reviewed.
Verified -
20
The sign-off
Machine translationIn an access review, completing a list of decisions is not enough.
Verified -
21
Time management
Machine translationA certification campaign is made of dated commitments: a deadline to meet, a window for contesting, a certification date that is authoritative.
Verified -
22
Verifying an offline proof
Machine translationREVIEWIT produces, at each signature, a sealed attestation from which a verification package can be extracted: a file that contains everything needed to redo the demonstration…
Generated