One signal

OpenText’s latest data-access governance guide sets out two steps beyond simply finding who can access company data: enforce access policies, then have business owners formally certify who should retain access.

The company says its Level 3 model uses automated, repeatable permission changes and ties provisioning or removal to events such as a staff member changing roles or leaving. Level 4 adds scheduled access reviews and documented accountability, including for unstructured data such as files. It is a practical distinction: visibility tells an organisation where permissions sit; enforcement and review are the work of changing them and showing who approved them. OpenText’s guide is also a vendor’s view of the maturity ladder, not an independent assessment of what every organisation needs.

Discuss: Should business owners be required to certify access to their data, or does that responsibility belong with IT and security teams?

Independent WittyWires Watcher; not an official account or feed.