Question 1

What is identity governance and administration (IGA)?

Accepted Answer

Identity governance and administration is the set of policies, processes, and technologies used to decide who should have access to which resources, provision that access, review it, and remove it when it is no longer appropriate.

Question 2

What is the difference between IAM and identity governance?

Accepted Answer

Identity and access management (IAM) authenticates identities and controls access. Identity governance adds the policy, approvals, lifecycle management, access reviews, separation of duties, and audit evidence needed to keep that access appropriate over time.

Question 3

What are the core capabilities of an IGA platform?

Accepted Answer

Core IGA capabilities include identity lifecycle management, access requests, automated provisioning and deprovisioning, access reviews, role and policy management, separation-of-duties controls, remediation, and audit reporting.

Question 4

How is AI-native identity governance different from legacy IGA?

Accepted Answer

AI-native identity governance uses current identity and access data to assemble decision context and automate routine work. C1 keeps people responsible for decisions that require judgment while policy handles approved, repeatable cases.

Question 5

How does C1 automate joiner, mover, and leaver workflows?

Accepted Answer

C1 Lifecycle can turn identity changes in connected source systems into policy, approval, provisioning, and revocation steps. The identity event, resulting actions, and final status stay connected in one workflow.

Question 6

What is an access review?

Accepted Answer

An access review, also called an access certification, asks a responsible reviewer to confirm whether a person or non-human identity should keep specific access. C1 gives reviewers identity, entitlement, peer, usage, and risk context before recording the decision and any remediation.

Question 7

How does identity governance support least privilege?

Accepted Answer

Identity governance supports least privilege by limiting access to what a role or task requires, expiring temporary grants, reviewing existing access, and removing permissions that are unused, inappropriate, or no longer justified.

Question 8

How does C1 manage separation of duties?

Accepted Answer

C1 Comply can identify conflicting combinations of access, route the conflict for review, record the decision, and initiate supported remediation. This helps prevent one identity from controlling incompatible steps in a sensitive process.

Question 9

Can C1 govern human and non-human identities together?

Accepted Answer

Yes. C1's identity graph can connect workforce identities, service accounts, workloads, and AI agents to their accounts, entitlements, owners, and access paths so teams can apply a consistent governance model.

Question 10

How does identity governance help with compliance audits?

Accepted Answer

IGA creates evidence showing who requested access, which policy applied, who approved or reviewed it, what changed in the target system, and whether remediation completed. The evidence supports audits, but compliance still depends on each organization's controls and implementation.

Question 11

Can C1 govern cloud, on-premises, and custom applications?

Accepted Answer

C1 Connectors and C1 Bridge connect supported cloud, private, legacy, and custom systems to identity governance workflows. Systems without a supported connection can still require a tracked manual action.

Identity governance

How does our team get the tools and access they need, at machine speed, without compromising security?

Automate lifecycle, access, compliance for the human and agentic workforce.

Automate on-boarding

Enable self service

Provision instantly

Grant birthright access

On-board apps in minutes, not months

Automate compliance

The C1.ai products you'll use:

Move identity work out of tickets, spreadsheets, and review queues.

FAQs

Latest on the platform

C1 for Identity Governance

Agentic AI Security Risks: The OWASP Top 10 and How to Fix Them

How Qualtrics Unified Identity, Streamlined FedRAMP Compliance, and Transformed Employee Access with C1