Smarter Week

How to automate it

How to automate “run quarterly user access reviews”

Here are 2 ways to spend less time on this, best first. Each comes with steps you can follow today.

240 min
typically, once a month
65%
of the time can be automated
Some setup
to set up

Fix 1 of 2

AutomationBest fix

Let people request access themselves with approval built in

Access request tools let users ask for an app or group from Slack or a portal, route it to the owner for approval, and grant it automatically, with a full audit trail for reviews.

Typically saves about 60% of the time6 h to set up
  1. 1Pick the tool: Entra ID access packages, Okta Identity Governance, or ConductorOne, Lumos or Opal.
  2. 2Name an owner for each app or group who approves requests.
  3. 3Allow requests from Slack or Teams and set access to expire where sensible.
  4. 4Use the same tool to send quarterly access reviews to owners.

Tools: Microsoft Entra ID Governance · Okta Identity Governance · ConductorOne · Lumos · Opal

Fix 2 of 2

Software feature

Let a compliance platform collect evidence automatically

Vanta, Drata and Secureframe connect to your cloud, identity and HR systems and check controls continuously, so most audit evidence is collected without screenshots.

Typically saves about 60% of the time8 h to set up
  1. 1Connect the platform to your cloud accounts, identity provider, HR system and code host.
  2. 2Map controls to your framework (SOC 2, ISO 27001, HIPAA).
  3. 3Fix the failing tests it shows, and assign owners for manual controls.
  4. 4Give your auditor access to the platform instead of evidence folders.

Tools: Vanta · Drata · Secureframe · Sprinto

Who does this task

Roles in our library that list this as one of their common tasks. Each guide covers the rest of that role’s week.

IT / Systems administratorSecurity analyst

HourLeak · the 8-minute work audit

How many hours does this cost you?

The free 8-minute check works out where your week goes and gives you your top fixes. The team scan does the same for everyone and adds it up, so you know which leaks to fix first.

Take the free check Scan my team, $49

Answers are anonymous. Leaders only see team totals.

Other common tasks for IT / Systems administrators