Skip to main content

How to perform a User Access Provisioning Review

Learn how to perform a user access provisioning review using DataSnipper's Form Extraction to test IT access controls.

Learn how to perform a user access provisioning review using DataSnipper's Form Extraction to test IT access controls efficiently and consistently.

Video tutorial

What the video covers

The video walks through a user access provisioning review in DataSnipper for Excel, from importing user access forms to extracting key data points with Form Extraction and validating the approval attributes. It follows the same workflow described in the steps below, from opening the work paper to using the Validation Snip on the extracted results.

Prerequisites

  • User access forms

  • Relevant employee lists

  • Professional package

Start procedure

To perform a user access provisioning review using DataSnipper's Form Extraction:

  1. Open the work paper for IT Access Controls review and select a sample of new joiners.

  2. Import all the user access forms using the Document Organizer.

  3. Click on Document Extraction on the DataSnipper ribbon, and select Form Extraction to open the form extraction window.

    Form Extraction option on the DataSnipper ribbon
  4. Click on 'Start new Form Extraction' and select the source documents to extract information from.

    Starting a new Form Extraction and selecting source documents
  5. Set the extraction frequency, for example 'extract per page' for multiple pages.

    Setting the extraction frequency in Form Extraction
  6. Draw rectangles over all the data points you want to extract, such as employee number, approver name, job title, and administrator name. Make sure each Snip fully covers the data point.

    Drawing extraction rectangles over user access form data points
  7. Double click on the extraction headers in the preview pane to rename them.

    Renaming extraction headers in the preview pane
  8. Click on the blue 'Export to Excel' icon.

    Exporting the extraction results to Excel
  9. Copy and paste the cross-referenced Snips into your workpaper.

    Copying cross-referenced Snips into the workpaper
  10. Use the Validation Snip to identify passed attributes and verify that access approval came from a different authority than the administrator.

    Using the Validation Snip to verify segregation of duties in access approvals
Did this answer your question?