Resources
A better conversation
about access starts here.
Concepts, methods and practical considerations for teams working with identities, data platforms and access reviews.
What is effective access?
Understand the difference between an assigned role and the access an identity can gain through groups and inheritance.
Read the guidePrepare for your first assessment
Purpose, scope, read permissions and evidence: four considerations that make the first review more useful.
Read the guideGood evidence starts with clear boundaries
Why every conclusion about access needs its source, collection time and coverage alongside it.
Read the guideYour first questions
What to know
before we begin.
Does Corinio change our permissions?
The assessment is read-only. Corinio collects and analyses metadata and provides recommendations. Any changes follow your own controlled processes and are carried out by the responsible people in your organisation.
Does Corinio replace our IAM or IGA solution?
Corinio complements the systems that provision and manage access. It focuses on understanding and documenting existing access across the platforms included in an assessment.
Do we need to send our data to Corinio?
Customer-controlled execution is the starting point. Location, access, data types and retention are agreed for each engagement. An assessment works with identity, permission and resource metadata; reading business data would require a separate agreement if relevant at all.
Which platforms can we start with?
The current focus is Microsoft Entra ID, Azure and Databricks. Data sources, permissions and specific coverage are validated in each pilot. AWS and other systems are part of the longer-term direction and require a separate scope discussion.
Does an assessment make us compliant?
An assessment can support access control documentation and internal reviews. It is not a certification or a complete compliance assessment. Requirements, processes and other controls need to be evaluated in your own context.
Know your access.
Move forward with clarity.
Let’s start with your platforms and the questions you need answered.