How to ensure your organization is compliant with the POPI Act regulations?

How to ensure your organization is compliant with the POPI Act regulations?

The Protection of Personal Information Act (POPIA) is mandated by the South African government for data privacy. It regulates how organizations operating from and outside South Africa can collect, store and process the personal information of citizens of South Africa. Non-compliance with this act can result in legal actions against the organization including prison terms ,or fines up to R10 million. ADManager Plus can help you stay on top of major POPIA regulations with capabilities like:

  • In-built reports on access permissions, custom attributes like source of information, consent,etc, audit trails of technicians with access to the information, etc

  • User provisioning templates with role based access controls

  • Customizable disable and delete policies

  • Managing access to shares and servers

  • Automations to provide time bound access permissions, Periodic cleanup of stale user accounts and related user information, and more. 

Reports are a simple way to keep track of access permissions, source and purpose of collected user information, and users who have access to critical data. You can also review audit trails of technicians who are delegated tasks that require access to user details, like user provisioning and password resets.  The following steps will walk you through the process of generating reports using ADManager Plus. 

  1. Logon to ADManager Plus.

  2. Navigate to Reports. You can find the reports listed in their respective categories here. Most of the reports required for access governance are listed under the categories Folder reports, User reports, and Computer reports, etc.

  3. Select the domain and OUs (if needed) and click Generate. 

To schedule and export a report,

 

1. Navigate to Reports > Schedule Reports > Create Schedule.

2. Enter a suitable Name and Description for the schedule.

3. Choose the Domain and the Reports you wish to schedule. Click on the edit icon next to the chosen report to select the attributes or columns you need in the report.

4.  You can set the frequency of the report generation to be Hourly, Daily, Weekly, Monthly or a Custom time period. You can also set the time of the day for the report to be generated.

5. Likewise, you can choose the format (HTML, CSVDE, CSV, PDF or XLSX) in which you want the report to be delivered in the Schedule Report Format section.

6. Enter the email address of the IT managers or security team heads, to whom the report needs to be sent to.

7. Click Save.

 

Tune in next week for an interesting hack on creating your own custom user provisioning templates with role based access controls!

 

Cheers,
ADManager Plus.