In an access review, a supervisor or application owner confirms the right access into the applications and systems under review. Access reviews are critical to maintaining the security of applications and are also mandated by regulations such as HIPAA, SOX, etc.

Step 1: Log into Zilla

As a manager, you will receive an email similar to the one below. This email is sent on behalf of your compliance or security team once an access review campaign is started. In this email, the review campaign is called “Hubspot access review”.

Open

The “Go To Task” button in this email will take you to the Zilla application as shown below. You may be presented with a login screen similar to this one.

Open

Please login with your work email address. Upon login, you will not be asked to enter a password. Instead, you will be redirected to the corporate Single Sign-On system such as Azure Active Directory.

Step 2: Review your Task

After signing in, Zilla will take you directly to the tasks page as shown below. Click on your review task. If you have multiple campaigns or applications to review, they will be listed here.

Step 3: Complete Access Review

This screen shows all the people that report to you and the systems for which they have access permissions.

Please review each individual permission:

• Check the box labeled “Maintain”, if this permission should be kept.

• Check the box labeled “Revoke”, if this permission should be marked for removal.

• If you need another user to decide, please click on the “reassign” icon and identify the individual who should be asked to review the permission. Zilla will send that individual an email.

• To add a comment, click on the overflow actions menu and select the “post-it” icon to add a comment. This is helpful for when an existing Permission should be changed with another one.

Once you complete the review, you will be asked to certify the review.

Once you submit, Zilla will maintain the entire record of your review.

Completing a review task - Demo