The NEXIS Health Check

What’s the Status Quo of Your IAM and Entitlement Landscape?

Nexis and its NEXIS Health Check are integral components of an Identity Visibility and Intelligence Platform (IVIP) as it directly addresses core needs for understanding, analyzing, and optimizing an organization's digital identity landscape.
The NEXIS Health Check is a focused, data-driven assessment of an organization's entitlement and role, and policy landscape. It aims to provide clarity with minimal effort, uncovering hidden risks, evaluating data quality, and simulating or optimizing role models. It's designed as a high value starting point for initial identity insights and visibility into existing IGA data.

Phases of the NEXIS Health Check

The Methodology Involves a Structured Approach With Clear Phases:

Scoping & Kick-off

Defining objectives, collecting necessary IAM/export data, and setting up the NEXIS 4 software. Nexis provides the software, either as a virtual machine or SaaS, for this phase.

Data Import & Verification

Importing identities, entitlements, and structures, preferably from existing Identity Governance and Administration (IGA) systems like SailPoint, One Identity, Saviynt, Microsoft Entra ID, OpenText NetIQ, Omada, Oracle, IBM, Eviden DirX, Beta Systems and others. Alternatively, data can be imported via CSV or connectors for AD, Entra ID and SAP systems. This step also involves confirming data accuracy.

Analysis & Role Modeling/Simulation

Checking data plausibility, measuring data quality, and determining the potential for role-based authorization assignment. This includes executing hybrid role mining (for greenfield or existing role optimization), calculating role, surfacing quality issues, and examining identity grid patterns. Automated business role generation based on organizational structure and attributes is simulated.

Results Presentation & Recommendations

Delivering visual key findings, prioritizing next steps, and positioning follow-on initiatives. This process is designed to be standardized yet adaptable, with checkpoints and interim alignments.

Core Deliverables

Upon Completion, the NEXIS Health Check Provides Several Crucial Outputs:

Role Modeling or Optimization

Simulations and calculations for both greenfield (new) and existing role structures and aiming different coverage calculations.

Visual Diagnostics

Tools like the "Identity Grid" and "Customer Matrix" a market benchmark to visualize structure, outliers, and maturity levels.

Data Quality Insights

Identification of issues such as orphan accounts, inconsistent attributes, overlapping access or SoD (Separation of Duties) violations.

Key Findings and Prioritized Roadmap

Clear next steps for improving IAM posture.

Final Presentation

Tailored for both technical and management stakeholders, providing a comprehensive overview and benchmark comparison with anonymized data from other companies.

Value and Benefits

The NEXIS Health Check addresses common pain points such as a lack of transparency in policy and role coverage and entitlement structure, heterogeneous or low-confidence identity data, and difficulty interpreting IGA data. Its value lies in building the foundation for:

Saving Time and Costs

Saving time and costs by automating role and policy modeling or optimization and reducing manual effort.

Enhancing Security

Enhancing security by reducing excessive access (least privilege violations and separation of duties, SoD) and human errors, thus mitigating risks of policy violations.

Simplifying Operations

Simplifying operations through easy-to-use, no-code workflows and intuitive interfaces.

Audit Readiness

Ensuring continuous audit readiness and compliance without significant overhead, providing transparent and accountable data and processes.

Improving Efficiency

Improving efficiency through advanced analytics for quicker decisions and automated, standardized workflows.

Frequently Asked Questions

The NEXIS Health Check for IAM is a focused, data-driven assessment designed to evaluate an organization's entitlement, role and policy landscape as part of a cutting-edge Identity Visibility and Intelligence Platform (IVIP). It aims to uncover hidden risks, assess the quality and coverage of identity data, and simulate or optimize role models. The primary goal is to provide prioritized, actionable recommendations and a clear roadmap for improving Identity and Access Governance (IAG).

Organizations often face several challenges related to their IAM systems that the NEXIS Health Check can resolve. These include a lack of transparency in role coverage and entitlement structures, inconsistent or unreliable identity and attribute data that hinders effective modelling, and difficulty in understanding and interpreting structural IGA data and identifying outliers in entitlement assignments. Many companies also struggle with the complexity, inflexibility, and poor usability of their existing IGA tools, leading to high operational costs and low user adoption.

The NEXIS Health Check involves a structured approach with several phases:

Scoping & Kick-off: Defining objectives, collecting necessary IAM/export data, and setting up the NEXIS 4 software. Nexis provides the software, either as a virtual machine or SaaS, for this phase.
Data import: Importing identities, entitlements, and structures, preferably from existing Identity Governance and Administration (IGA) systems like SailPoint, One Identity, Saviynt, Microsoft Entra ID, OpenText NetIQ, Omada, Oracle, IBM, Eviden DirX, Beta Systems and others. Alternatively, data can be imported via CSV or connectors for AD, Entra ID and SAP systems. This step also involves confirming data accuracy.
Data Verification: Ensuring that imported identities, entitlements, and structures accurately reflect the source systems.
Analysis & Role and Policy Modeling/Simulation: Checking data plausibility, measuring data quality, and determining the potential for role-based authorization assignment. This includes executing hybrid role mining (for greenfield or existing role optimization), calculating role, surfacing quality issues, and examining identity grid patterns. Automated business role generation based on organizational structure and attributes is simulated.
Results Presentation & Recommendations: Delivering visual key findings, prioritizing next steps, and positioning follow-on initiatives. This process is designed to be standardized yet adaptable, with checkpoints and interim alignments.

NEXIS 4 is an AI-driven, zero-code platform designed to revolutionize Identity and Access Governance. Its key differentiators include:

Hybrid Role Mining: Combines data-driven simulation with structured top-down and business-induced approaches for reliable role modelling.
User-Friendly Design: Intuitive interfaces, self-service options, and a configurable UI make it accessible for all stakeholders.
No-Code Flexibility: Enables rapid deployment and implementation of any IAG use case without custom coding, significantly reducing implementation costs and time-to-production.
Real-time Governance and AI-driven Analytics: Provides continuous audit readiness, advanced analytics for quicker decisions, and automated policy controls.
Seamless Integration: Fully compatible with various existing IAM/IGA systems (e.g., SailPoint, One Identity, Microsoft Entra ID Governance) via standard APIs, allowing it to enhance functionality without replacing existing infrastructure.

The cost of a NEXIS Health Check typically depends on the company's size and data complexity and is a fixed price. This fixed price includes a discounted license rental for NEXIS 4 during the project period (usually two months) and an expense allowance for approximately 4-6 person-days of our services. Your time investment is minimal, primarily involving providing a virtual machine or relying just on the Nexis SaaS offering, supplying data for analysis (preferably from an existing IAM system or via CSV/connectors), and participating in a short initial kick-off, the data verification step and a final 2-3 hour workshop.

NEXIS 4 addresses a wide range of solution scenarios, including:

Modernizing IAM: Enhancing legacy IGA systems with new functionality, self-service options, and real-time compliance without replacing existing investments.

Compliance: Simplifying authorization challenges by ensuring policy enforcement, Segregation of Duties (SoD), and audit readiness through automated controls and structured authorization concept management.

IGA Light: Providing smart identity governance for SMBs (250-5,000 employees) with no-code workflows, full visibility on access rights, and integrated compliance, saving time and costs.

Authorization Governance for Microsoft Entra ID: Specifically enhancing compliance and governance for organizations using Microsoft Entra ID Governance through automated discovery, optimization, and management of authorization structures. These solutions lead to benefits such as significant reductions in onboarding time, faster recertifications, improved security by reducing excessive access, simplified operations, and continuous audit readiness.

NEXIS 4 acts as an enabler for organizations at various stages of IAM maturity. It helps customers understand their current state and guides them through logical next evolution steps.

Initial Health Check: Provides a baseline understanding of role models, data quality and potential data cleansing efforts.

Optimization & Control: Facilitates continuous improvement and monitoring of access policies.

Decentralized IAM Services: Empowers business users with self-service capabilities for managing roles and access, reducing reliance on central IT teams. By automating processes like role lifecycle management, risk-based access control, and comprehensive access reviews, NEXIS 4 enables organizations to transition from manual, error-prone processes to highly automated, compliant, and user-friendly authorization governance.

NEXIS Health Check