AAG Risk Ruleset for Epic

Developed by Saviynt

Overview

The Epic ruleset includes 70+ risks across the business process area of Healthcare Financials. The ruleset currently includes reviews of fine-grained entitlements at the HB Security Points, Professional Billing Security Points and Shared Security Points level. Additional entitlements can be included, such as other Security Points, Templates, Subtemplates, etc.

Features

Saviynt provides out-of-the-box rulesets and controls that build the foundation for reducing both potential and real SOD violations. It establishes SOD and sensitive access checks at a fine-grained level to avoid false positives and gain efficiencies during compliance reviews. This helps users prioritize remediation efforts and provides an effortless audit trail. Saviynt’s deep integration with each SaaS or onpremises application provides levels of detection not found in coarse-grained Governance, Risk, and Compliance (GRC) solutions. Saviynt’s Application Access Governanace (AAG) solution provides SOD and sensitive access rulesets in which the following are predefined:

  • Risks.
  • Functions associated with the risk.
  • Description of the risks.
  • Objects within a function.
  • Risk priority: Critical, high, medium, low.
  • Risk status: Active or inactive.
  • Risk type: SOD or critical access.
  • Risk Owners.
  • Business process.
  • Mapping of the functions associated with a business process.