ISACA

Access risk and control models designed for single ERP environments no longer reflect how modern enterprises operate at scale. As organizations expand across procurement, HR, finance, and other line-of-business applications, access governance becomes distributed, business-owned, and increasingly complex. This session examines how enterprise-wide access risk evolves across ERP and critical business systems in real-world operating environments, and why traditional controls such as segregation of duties, user access reviews, and privileged access processes struggle to keep pace. Attendees will gain insight into how access governance must adapt to support modern governance and assurance expectations across the enterprise.

Has the focus of Data Access Governance really changed in the face of an AI powered economy? Fundamentally the tried-and-true process of Data Access Governance requires a metered and prescriptive approach. During this discussion we will unpack the blocking and tackling of a solid Identity focused, Data Access Governance program that can help security practitioners navigate choppy waters.