From 100 to Zero: Fixing Access Recertification the Right Way | Analyst Chat 289

Описание: Access recertification is one of the most disliked processes in Identity & Access Management, and for good reason.
In this episode, Matthias Reinwarth and Martin Kuppinger challenge the way organizations approach access reviews. Instead of endlessly optimizing broken campaigns, they ask a more fundamental question: What if we eliminated most of recertification altogether?

Key topics:
✅ Why traditional access certification campaigns fail
✅ How overengineered role models create complexity and “rubber stamping”
✅ Why 80–90% of entitlements can be automated via policy
✅ How time-limited access dramatically reduces review effort
✅ Where AI and usage analytics can safely remove unused permissions
✅ Why static entitlements and standing privileges are the real root cause
✅ How modern authorization (e.g., externalized policy models) changes the game

00:00 Introduction to Recertification Challenges
02:44 Understanding the Complexity of Access Models
05:26 The Role of Automation in Recertification
07:59 Data Quality and Process Optimization
10:56 Time-Limited Access and Its Benefits
13:48 Leveraging AI for Improved Access Management
16:29 Addressing Static Entitlements and Their Risks
18:59 Future Directions in Authorization Standards

The discussion also touches on the 50-year legacy of IBM RACF and why we still haven’t fully embraced externalized authorization — despite knowing better since 1976.

If you struggle with 70-page access review PDFs, role explosion, or endless recertification campaigns, this episode offers practical, implementable guidance — much of it possible with capabilities you already have in place.

Subscribe to our podcast!
Apple Podcasts: https://podcasts.apple.com/podcast/ku...
Spotify: https://open.spotify.com/show/3leKXJ9...
Deezer: https://www.deezer.com/us/show/1848172
TuneIn: https://tunein.com/podcasts/Technolog...

[email protected]
www.kuppingercole.com

Follow us on social media:
Facebook:   / kuppingercole  
Twitter:   / kuppingercole  
LinkedIn:   / kuppingercole  
Instagram:   / kuppingercole