Assessing Identity & Access Management

Course Description

10 Hours of NASBA-Certified Auditing CPE

1 CPE hour = 50 minutes

Delivery Method: QAS Self Study

This course provides a comprehensive review of Identity and Access Management (IAM) controls, essential for securing systems and data in modern IT environments.

Participants will explore the principles, processes, and technologies that underpin IAM, including authentication, authorization, user provisioning, access reviews, and identity lifecycle management.

The course emphasizes both technical and policy-based controls, with a focus on regulatory compliance, risk mitigation, and the implementation of least privilege and zero trust principles. Throughout the course participants will gain practical skills in designing, evaluating, and managing IAM controls to protect organizational assets from internal and external threats.

The course will review several ERP SaaS Cloud business application systems to apply the concepts covered in the class.

Course Objectives:

• Recognize foundational Identity & Access Management / IAM concepts, key risks and associated controls.
• Identify controls to protect your enterprise’s information from unauthorized access.
• Assess risks & controls pertaining to your enterprise developing and maintaining user access profiles.
• Define an audit strategy to assess IAM risks and controls for your enterprise systems.
  
  

Course Agenda:

IT Risks & Security Resources

• Risk & Risk Management
• Defining AI
• Machine Learning
• Robotic Process Automation (RPA)
  

Determining IAM Control Risks

Security & Control Resources

IT Asset Management

Access Management

• Authentication
• Authorization
• Single Sign-On
• Privileged Access

Audit Trails & Log Management

User Profile Management

• User Provisioning
• User Deprovisioning
• Role Design Change Management

Testing IAM Controls

Operations Management

• Incident Response Management
• Vulnerability Management
• Malware / Ransomware
• Zero Trust / Endpoint Security

ERP / SaaS Systems

• ERP Cloud SaaS Security
• Oracle Netsuite
• Oracle Fusion ERP
• Workday

IAM Best Practices

Policies:

Refund Policy

ERP Risk Advisors provides refunds in accordance with the refund policy of Teachable, our learning platform host. Refunds must go through the support funnel found at https://support.teachable.com/hc/en-us/articles/360004215372-Request-a-Refund. Teachable’s terms of use, including the refund policy, can be found at: https://teachable.com/terms-of-use.

Program Cancellation Policy

If a participant cancels a paid ERP Armor: Learning subscription plan, the cancellation will become effective at the end of the then-current billing cycle. When a participant cancels a paid plan, their account will revert to a free account and Teachable may disable access to features available only to paid plan users.

Complaint Resolution Policy

Participant(s) should email support@erpra.net and provide as much detail as possible about the complaint, including any relevant screenshots, account information, or transaction details. Upon receiving the complaint, ERP Risk Advisors’ support team will acknowledge it within 24 hours during business days. ERP Risk Advisors’ support team will investigate the complaint thoroughly. This may involve reviewing relevant records, consulting with appropriate personnel, and gathering additional information as necessary. ERP Risk Advisors aims to resolve all complaints as quickly as possible. Depending on the complexity of the issue, resolution may take up to 5 business days or more. During this time, ERP Risk Advisors will keep the participant(s) informed of the progress and any steps being taken to address their concerns. Once a resolution has been proposed, ERP Risk Advisors will contact the participant(s) to discuss the outcome. If participant(s) are dissatisfied with the initial resolution provided by ERP Risk Advisors’ support team, they may request that their complaint be escalated. Escalations will be reviewed by a senior manager to ensure a fair and impartial review of concerns. ERP Risk Advisors treats all complaints with the utmost confidentiality. Information provided will only be used for the purposes of investigating and resolving a complaint, in accordance with our Privacy Policy. For more information regarding administrative policies such as complaints and feedback, please contact our support desk at support@erpra.net.

*****

For all other Administrative and Course Development Policies, please visit ERP Armor: Learning FAQ and click on the first Frequently Asked Question dropdown.