Fast and Secure
Cloud-Based Identity Auditing

“YouAttest was instrumental in having managers review and approve access. Everybody in a publiclytraded company (and to a large degree, the healthcare vertical) has this need. They're just trying to do this in different ways. I don't know how some of them are doing it, if at all. Managing these accounts is complex, and individuals may need a certain level of access to certain data. It's challenging to manage, and this probably grows exponentially with company size.”

“Requests from audit teams have become outrageous, and sometimes they even request the wrong items. There is a lack of understanding from the start of what is needed or required—providing a need to manage many tickets and screenshots to stay within compliance. Automation allows the number of hours spent on these tasks to decrease so there can be a greater focus placed on other, more important tasks. We used YouAttest to work with a company to automatically pull attestation reports for a greater time-saving benefit. There is no substitute for people understanding the process and how tools change parameters and more. Requiring proper planning ensures that audit teams understand what is required of them and how they can achieve it.”

“The type of work that I do, and what I've seen in the three years that I've been doing this sort of thing, is that a lot of times, companies end up doing whatever is a rubber stamp. They do the rubber stamp amount of work and comply with the wording or a requirement. But if you look at the requirement and comply with that, then look at how a malicious actor would circumvent or gain access to this data; you have a mismatch. But by simply rubber stamping, you are not solving why the compliance exists; it is simply creating a mismatch in work done. In reality, if there were an actor who understood things, they would be able to gain access potentially, or something that shouldn't happen could happen because of the way that the compliance requirement is written.”

“Compliance, for us anyway, is a double-edged sword. I'm in the financial industry, and our current industry is not regulated like SOX or PCI because we are not publicly traded. Even though we don't do transactions from a credit card perspective, we still need to meet the requirements for the sector. There's a burden on many smaller companies to understand what compliance requirements are and what you must do in terms of auditing. The larger your organization is, the more difficult it is to manage who has access; and the manual auditing process can get out of hand quickly. There's a certain amount of work, and it is all the better if you can automate that. The proper tools for automation like YouAttest put organizations in a much better position.”

“YouAttest tool has helped us streamline our access review process and comply with HITRUST compliance requirements. The tool is very easy to use. The technical support and management team are awesome and promptly addressed any issue we faced.”