SailPoint (SAIL) Status update summary

Overview of machinery of government (MOG) changes

• MOG changes are government reorganizations, similar to corporate reorgs, involving shifts in departments, portfolios, and staff roles.

• These changes result in large volumes of staff and system transitions, affecting both human and non-human entities like contractors and machine accounts.

• Manual processes, such as spreadsheets and scripts, are commonly used but are inefficient and error-prone.

• Risks include privilege creep, dormant accounts, audit challenges, and operational inefficiencies.

• MOGs present an opportunity to improve security, reduce risk, and streamline operations through automation.

Challenges and risks in current MOG processes

• Manual handling leads to mistakes, missed access changes, and lack of auditability.

• Privilege creep and dormant accounts increase security and compliance risks.

• Data loss, privacy breaches, and legislative risks can arise from improper access management.

• Operational risks include service disruptions and delays in access provisioning.

• Ownership of machine and agent accounts can be lost during transitions, compounding risk.

Identity governance and administration (IGA) as a solution

• IGA systems connect to HR and all target applications, correlating accounts and entitlements to a single identity.

• Automation enables direct provisioning, onboarding, and access changes, reducing manual effort and errors.

• Governance features include access reviews, policy enforcement, and audit trails for compliance.

• IGA supports humans, non-humans, third parties, and agents, ensuring comprehensive coverage.

• Succession planning ensures continued ownership of privileged accounts and agents.