Abstract: A system for reviewing the ownership of data resources includes a database that stores a plurality of data resource identifiers. Each of the plurality of data resource identifiers has an associated owner field. The system also includes a second database that stores data resource review definitions. The review definitions define a review processes for the plurality of data resources. The system further includes a processor that is in communication with the data resource database and the review definition database. The processor executes the data resource ownership review processes defined by the review definitions at the appropriate times.

Abstract: A system for reviewing role definitions includes a database that stores a plurality of roles. Each of the plurality of roles associates an identifier with at least one entitlement. The system also includes a second database that stores role review definitions. The review definitions define role review processes for the plurality of roles. The system further includes a processor that is in communication with the role database and the review definition database. The processor executes the role review processes defined by the review definitions at the appropriate times.

Abstract: A compliance manager system automates monitoring, reporting, certification and remediation of user entitlements and roles, making it possible for organizations to easily establish a sustainable access governance model. The system enables organizations to gain enterprise-wide visibility into all user entitlements and roles and, in particular, to monitor who has access to what application, how they got access, and who approved such access. In one embodiment, a discovery and aggregation mechanism acquires identity, entitlement and role information together with associated metadata from enterprise infrastructure and applications. This information is normalized producing a unified view that is complete and correlated across users, entitlements, roles and resources.