From the customer:

A required expiration/approval cycle for SOD policies: On a periodic basis (configurable), SoD policies will move to a “Review & Approval Required” status and the Owner of that SoD policy must take action in the tool to attest that the SoD policy configuration itself is correct. If a policy is correct, and stays the same year-after-year. The expiration/approval history for the SoD policy should be available by looking at the policy configuration itself in the GUI but must be available by running an SoD Policy Details Report.

Comments

  • Researching this idea to determine best way to approach.