Permission Governance Method Based on Separation of Responsibilities

In complex management information systems, there are a large number of business entities, complex permission relationships, and diverse access requirements. A set of permission governance methods is needed to solve the permission problems of the system and plan for the development of business permissions. This article summarizes a security and compliance permission governance method, which involves policy mining of a large number of logs generated by information systems, checking audit permission activities, identifying permission risks, and promptly addressing permission vulnerabilities. It also summarizes the role governance and user permission governance steps based on mutual exclusion of responsibilities for information systems and related peripheral systems. Combining the business characteristics and pain point scenarios of various modules in the information system, by establishing a closed-loop management of permissions, the permission governance system can self-improve, evolve synchronously with the iteration of the business system, achieve full lifecycle management of information system permissions and security and compliance detection, and safeguard the security of business activities.