How do you test access controls when all the applications utilize centralized LDAP groups?

like
Posting as :
works at
You are currently posting as works at

Validate the Domain connection and that there’s no native access

like

1. Validate that the ldap access is the only access method
2. Get an export of all accounts and see if they indicate other access methods
3. Actually have a user login and watch them

RSM’s clients love #2 😏

Related Posts

Any book recommendations on handling office politics?

like

Housekeeping knocks on door...Me: 💩💩😷..."Um... Still here!"

like

Bain & Company Why does tier 1 consulting pay so much less than tier 1 tech when consulting candidates (usually) go to better schools? I’m talking about software engineers making 200k TC at FAANG vs 130k TC MBB? McKinsey & Company Bain & Company Boston Consulting Group

likefunnysmart

Looking to join a running club for LGBTQ folk or other agency folk. Is that a thing? NYC by the way.

Do you keep your clearance if you quit your organization?

like

Any tips or advice for the Amazon Senior Program Manager Interview? This is the hiring manager zoom interview. I am excited and preparing as much as I can.

like

Credit Key - any insights? Has anyone worked at this company? I have an interview for a marketing role with them. Can't find any reviews on Glassdoor.

like

Hi, I’m currently working as a recruiter in the light industrial and I’m really sick of the non stop calls, interviews and just the nature of this profile. Earlier I was contemplating moving to another field in recruitment but now I’m considering switching to another profile in HR where I can do backend processes/ payroll/ hr systems, cz I want to leave the calls and interviews and sourcing.. please suggest profiles I could take a dig in and explore? Thanks in advance

like

If you are in IB, how much of your bonus is deferred, is it deferred as stock/cash and what is the vesting period?

like

Can anyone tell me what's this in Tech M
IBU CASCADE 1

Is it bad that I haven't led a radio record by myself at this point in my career? I've just never had an opportunity to. Any tips or advice? Or does this resonate with any art directors and designers out there?

like

Hi fishes, I got letter of intent from Wipro from the recruiting person on 28th march and given april 28th joining date and i have also accepted it

Also I have sent mail to join early but she is not responding for mails even hr(scheduled interviews) is not responding for calls

Can i get any clarification about this Would i get offer letter before that joining date or else they have gone with other candidate?

Thanks in advance

Tata Consultancy Cognizant Accenture Infosys Deloitte Atos

like

Hi Fishes,

I am trying to explore and obtain a career opportunity in UK or Europe. Could you all help me with how to go about it or any suggestion how to get an interview and move to UK for work.

like

Have a blessed day.

Post Photo
like
like
like

I have 7 years experience in personal US tax and have Enrolled agent licence . Can I be hired as a manager in big 4 ?

After working from home for the last 9 months, I do not want to ever go back into the office. I'd like to stay permanently remote. Advice for bringing this topic up with my manager? Or should I hold off on asking until we actually need to return (probably not until May or June at this rate). I feel like I am just as productive wfh and would like the ability to move away from my current city.

like

What is the leave policy in JP Morgan?

like

Bank of America I have come to know there are multiple openings in Product Control dept. I have total 9+ yrs of work experience, can anyone refer my CV?

like

Additional Posts in Risk Assurance

Mid year promotions, I found out you need to make your own case for it rather than the firm coming to you. If you think you’re ready make sure you speak up!

I'm a Tech Risk SC, but have an accounting/finance background. I'm doing the FRM now for broader cert experience, is it worth doing CA long term in my area?

I lead our SOC practice for a US mid tier cpa/consulting firm. I've been losing a lot of deals due to lower cost / boutique vendors who are partnered with these SOC automation platforms (Vanta, Laika, etc.). Have any of you used these tools for the audit and what has your experience been like? Thanks

like

How is IT audit at Baker Tilly? Looking to change from a big 4.

like

Currently in Risk Assurance but have the opportunity to transfer into Deals & Strategy. Which one is better for a career long term?

like

Crowe is hiring for quite a few positions across the US (Internal Audit, IT controls and cyber/digital security, Compliance,etc)… I’m a manager and would think some of these niche areas have great opportunity for new folks to excel rather quickly. Great flexibility and mobility policies. I’d be happy to chat if interested and get you directly in touch with the right people internally.

likefunny

Hi! I used to work at PwC and currently work at Friedman. I’ve been at Friedman for about a year and a half and I love it! We are hiring at an experienced associate and senior associate level! Cont..

like

If anyone (non EY) wants some referral money, I am looking for a job. Have 1yo in EYs Technology Risk Advisory practice and Gold Standard reviews. Also speak 3 languages but I don't think it matters.

like

If anyone is looking for a referral as an experienced hire to the PwC DAT (Digital Assurance & Transparency - formerly Risk Assurance) practice let me know and would be happy to refer you. We are actively looking to hire.

like

How do you apply design factors to IT Audits. Just overheard someone explain 'level of aggregation' for IT Security policies by describing how many people have access to it. Why is this a thing???

like

How do you tell your boss you're quitting without burning bridges? Please note we're in busy season for the engagements I've been staffed on, which is what makes me nervous and guilty. TIA

like

Does anyone have any good resources for auditing ESG?

Should I take this offer in a second line role with similar bad WLB as public? Current salary: 155k base, 8k annual bonus (7YOE):

Offer:
170 base
17k sign on
25,500 (15% annual bonus)
28k annual RSUs (vest quarterly)

like

Identifying a common process, what does this even mean 😩 please help.

like

What exit ops are there outside of testing controls all day? Getting tired of this. Resume is ready

likefunny

What’s it mean if your boss tells you to start looking for a new job? What would be your first step?

like

Is anyone here a HITRUST CCSFP? Was the exam hard?

like

Does anyone still have an active Becker account that I could borrow for 2 months to study for my REG exam? Please! Thanks!

like

I’m getting put up for manager a year early. I have PPMD ,SM, and M support. Pretty much support from all the key individuals on my team and in my service line. Since it is a year early if i don’t get promoted this round I know it’ll come mid year but I do expect a good salary increase still without the promo. If I don’t get the promo nor a salary increase that I’m okay with, how do I let my partner know that I will begin to entertain outside offers? some of which have offered the manager role.

like

New to Fishbowl?

Download the Fishbowl app to
unlock all discussions on Fishbowl.
That was just a preview…
Sign Up to see all discussions
  • Discover what it’s like to work at companies from real professionals
  • Get candid advice from people in your field in a safe space
  • Chat and network with other professionals in your field
Sign up in seconds to unlock all discussions on Fishbowl.

Already a user?
Login here

Share

Embed this post

Copy and paste embed code on your site

Preview

Download the
Fishbowl app

See what’s happening in your industry
from the palm of your hand.

A phone with Fishbowl app

Scan your QR code to download
Fishbowl app on your mobile

Download app

Sign up for free to view this conversation on Fishbowl

By continuing you agree to Terms of Use and Privacy Policy

Already have an account? Log in

Sign up for free to continue using Fishbowl

By continuing you agree to Terms of Use(New) and Privacy Policy(New)
Messaging rates may apply

Already have an account? Log in

For account settings, visit Fishbowl on Desktop Browser or

General

Legal