Protect arc · Detect to Correct

NADIA

Network, Access, Data & Identity Analyst

To verify that who has access in the systems matches who is supposed to have it.

Employee IDPXN-D2C-002

NADIA

Network, Access, Data & Identity Analyst

Position
Identity & Access Integrity
Value chain
Detect to Correct
Reports to
Chief Risk Officer · CISO
Measured on
SoD conflicts identified and remediated
Authorised · Logged · ReversibleRuns in Service and Risk and HR

Who in your organisation should not have the access they still have?

The question NADIA is hired to answer. The chart shows who holds the position and where the decision goes when it is not NADIA's to make.

Work chart

  1. AccountableChief Risk Officer · CISO
  2. Position held byNADIA
  3. Escalates toSecurity operations · Legal · Compliance · Board audit

With NADIA in the roleThese 34 accounts carry an access combination that your policy does not permit, here is when each was granted, and whether the person still holds the role it was granted for.

NADIA compares entitlement to actual access, identifies exceptions, assembles evidence packs, tracks remediation. Revocations and account deactivations, with evidence and history.

The number NADIA is measured on

Every digital coworker is hired against one primary measure, agreed and baselined before build. The others are read alongside it so the primary cannot be moved at their expense.

Primary measure

SoD conflicts identified and remediated

  • Dormant account coverage and closure time
  • Orphaned account identification rate
  • Time from exception identification to owner decision
  1. 01

    Combinations identified that no per-system review will reliably surface

  2. 02

    Dormant accounts visible by duration, the account that has not authenticated in 90 days and carries privileged access

  3. 03

    SoD conflicts documented with their history, when the access was granted, and whether the granting role still applies

  4. 04

    Evidence assembled for the owner to decide, rather than for analysts to debate first

  5. 05

    Re-accumulation tracked over time, because an access review with no follow-up monitoring is a point-in-time comfort

What NADIA does alone, and what stays with your team

NADIA reports to the Chief Risk Officer · CISO. Anything outside the written boundary goes to security operations, legal, compliance or board audit, with the evidence attached.

“Authorised. Logged. Reversible.”

Authority, and yoursPXN-D2C-002
Does this aloneCompares entitlement to actual access · identifies exceptions · assembles evidence packs · tracks remediation
RecommendsRevocations and account deactivations, with evidence and history
EscalatesHigh-risk SoD conflicts, privileged-access anomalies, potential exfiltration signals and policy breaches requiring immediate action → security operations and risk leadership without delay · Contested revocations → the access owner and legal · Systemic exception patterns → the identity governance owner as a policy failure
Chief Risk Officer · CISO
ProxyN outcome lead

NADIA's skills, and the workday

NADIA ingests identity, access and HR data, matches users to entitlement, identifies orphaned, dormant and conflicted accounts, correlates with access-change and activity logs, assembles evidence packs by account, routes for owner decision, tracks remediation, monitors re-accumulation over time.

  • Maps user accounts to HR records and role entitlement
  • Identifies orphaned, dormant and shared accounts
  • Detects SoD conflicts against the defined matrix
  • Correlates access with recent privileged activity
  • Tracks access-change event logs
  • Produces evidence packs by account for owner review
  1. Reads from Service and Risk and HR

  2. Ingests identity, access and HR data

  3. Matches users to entitlement

  4. Identifies orphaned, dormant and conflicted accounts

  5. Correlates with access-change and activity logs

  6. Assembles evidence packs by account

  7. Routes for owner decision

  8. Tracks remediation

  9. Monitors re-accumulation over time

  10. Your team decides

Get started

Stop Buying Platforms. Start Hiring Outcomes.

Bring one workflow and the person accountable for it. In the first session we map the process, establish the baseline logic and tell you whether there is a number worth signing. If there is not, we will say so.