access-review

You can automate entitlement audits by passing your identity metadata export to the skill, which then detects orphaned accounts, role explosion, and segregation-of-duties gaps while enforcing read-only, injection-hardened handling of untrusted IAM data.

Entitlement hygiene failures occur when access recertification campaigns miss orphaned accounts or rubber-stamp certifications, leading to unchecked privilege debt and weak audit evidence across your IAM metadata and identity sources.

Yes, the access review maps recertification findings directly to NIST SP 800-53 Rev. 5 AC controls (AC-2, AC-5, AC-6) and CIS Controls v8 (5, 6), producing audit-ready severity classifications with evidence expectations and prioritized remediation roadmaps.

Run an entitlement audit by passing your target file or directory to the skill; it investigates orphaned accounts and checks for role explosion by processing untrusted identity and IAM metadata to identify scope and cadence gaps in access recertifications.

No specific identity governance platform is required; least privilege auditing operates on entitlement and identity metadata exports, applying read-only and injection-hardened handling to detect privilege debt and entitlement certification failures across any IAM source.

Access reviews often miss SoD violations due to rubber-stamped certifications and scope or cadence gaps in recertification campaigns; automating entitlement auditing validates segregation of duties across entitlements and identity sources to detect these operational failures.