Measuring Recertification Effectiveness via Erroneous Account Injection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Identity and Access Management (IAM) systems lack effective methods to measure the success of recertification campaigns and identify dormant or unused accounts, with managers often rubber-stamping requests without thorough review.
Innovation Solution
An IAM system is augmented to include a methodology where erroneous account information is intentionally inserted into recertification campaigns, tracked through the process, and used to calculate a quantitative measure of campaign effectiveness, such as the percentage of erroneous records identified by managers, to assess their recognition and reporting accuracy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If managers review recertification requests thoroughly, then accuracy of identifying valid accounts is improved, but time consumption and workload increase
Solution Approach 1:
The system performs preliminary actions by automatically generating recertification requests, notifying relevant managers, and preparing account information before the actual review process. This automation of preparatory tasks reduces the manual time investment required while maintaining review accuracy.
Solution Approach 2:
The system implements feedback mechanisms where recertification outcomes are tracked and reported back to managers and the IAM system. This feedback loop enables continuous improvement of the recertification process and provides quantitative measures of effectiveness, helping managers refine their review processes over time.
2Productivity
If recertification processes are simplified and automated, then processing speed is improved, but effectiveness at finding unused accounts deteriorates
Solution Approach 1:
The system enables self-service recertification where account owners can automatically confirm or deny their continued need for accounts without requiring manual manager intervention for straightforward cases. This automation maintains processing speed while the system independently identifies potential unused accounts through activity monitoring and anomaly detection.
Solution Approach 2:
The patent replaces manual mechanical review processes with automated electronic systems that use algorithms to identify dormant or unused accounts. These automated systems analyze account activity patterns, login frequencies, and usage metrics to reliably detect unused accounts at scale, maintaining both speed and effectiveness.
3Measurement precision
If quantitative measures are implemented to assess recertification effectiveness, then ability to measure campaign success is improved, but system complexity increases
Solution Approach 1:
The IAM system is enhanced with multi-functional capabilities that simultaneously perform recertification management, effectiveness measurement, reporting, and analytics. By integrating these functions into a unified platform rather than separate systems, the solution provides comprehensive measurement capabilities without proportionally increasing overall system complexity.
Data Source
AI summary
An identity management system is augmented to provide a methodology to generate an objective measure of administrative effectiveness with respect to account certification. In the approach, erroneous account information is intentionally inserted into a recertification campaign. The erroneous account information is tracked through the recertification process and used as a measurement to evaluate whether a particular manager/administrator whose accounts are impacted is successful in recognizing the erroneous account information (e.g., as a percentage of erroneous account records located). The dummy information is tracked and used to generate a quantitative measure of the effectiveness of a particular recertification campaign or a particular manager who is responsible for recertifying accounts. The results can also be used to drive other enterprise metrics and compliance systems.