Abstract: Methods and apparatuses are described for generating and managing electronic communication campaigns. A data storage container receives campaign data comprising electronic communication metadata and structured review data from a first computing device. A server prepares one or more electronic communications based upon the campaign data by partitioning the structured review data into one or more subsets, each associated with a user identifier, and generating, for each subset, an electronic communication addressed to a user corresponding to the user identifier and comprising a URL to access the review data. The server transmits the prepared electronic communications to one or more remote computing devices. The data storage container updates the structured review data using input received from each remote computing device after detecting activation of the URL transmitted to the remote computing device to access the review data.

Abstract: Methods and apparatuses are described for generating and managing electronic communication campaigns. A data storage container receives campaign data comprising electronic communication metadata and structured review data from a first computing device. A server prepares one or more electronic communications based upon the campaign data by partitioning the structured review data into one or more subsets, each associated with a user identifier, and generating, for each subset, an electronic communication addressed to a user corresponding to the user identifier and comprising a URL to access the review data. The server transmits the prepared electronic communications to one or more remote computing devices. The data storage container updates the structured review data using input received from each remote computing device after detecting activation of the URL transmitted to the remote computing device to access the review data.

Abstract: A computer-implemented method is provided for evaluating quality of a job role in a user group comprising a plurality of users. The method includes determining from a plurality of resources accessible by the users in the user group (i) a plurality of assigned resources included with the job role and (ii) a plurality of outlier resources outside of the job role. The method also includes calculating an included access score for the job role with respect to the assigned resources and an outlier access score for the job role with respect to the outlier resources. The method further includes calculating a weighted sum of the included access score and the outlier access score, where the weighted sum represents the quality of the job role.

Abstract: Methods and apparatuses are described for enterprise access control governance in a computerized information technology (IT) architecture. A server determines access control entitlements for each of a plurality of users of the IT architecture, and converts the access control entitlements for each user into a multidimensional vector. The server generates a vector space comprising a plurality of nodes, each node in the vector space corresponding to a multidimensional vector associated with the access control entitlements. The server determines clusters of nodes in the vector space by using a similarity measure based upon dimensions of the vector. The server identifies a job role associated with each of the clusters of nodes in the vector space based upon access control entitlements that are common to the nodes. The server locates outlier nodes in the vector space positioned at least a predetermined distance away from at least one of the clusters.

Abstract: A computer-implemented method is provided for generating an access profile for a given user in a group of users. The method includes generating (i) a demographic similarity matrix of demographic similarity scores, each score measuring a degree of similarity between a pair of the users with respect to a demographic metric in a plurality of demographic metrics, and (ii) an access similarity matrix of access similarity scores, each score measuring a degree of similarity between a pair of the users with respect to an entitlement in a plurality of entitlements. The method also includes calculating a group similarity matrix based on a weighted average of the demographic and access similarity matrices. The method further includes creating the access profile for the given user based on the group similarity matrix. The access profile indicates access recommendations for the given user in relation to the plurality of entitlements.

Abstract: Methods and apparatuses are described for enterprise access control governance in a computerized information technology (IT) architecture. A server determines access control entitlements for each of a plurality of users of the IT architecture, and converts the access control entitlements for each user into a multidimensional vector. The server generates a vector space comprising a plurality of nodes, each node in the vector space corresponding to a multidimensional vector associated with the access control entitlements. The server determines clusters of nodes in the vector space by using a similarity measure based upon dimensions of the vector. The server identifies a job role associated with each of the clusters of nodes in the vector space based upon access control entitlements that are common to the nodes. The server locates outlier nodes in the vector space positioned at least a predetermined distance away from at least one of the clusters.