All runs

ITSM

Access reviews

2,400

accounts, every quarter

Owner
Head of IT
Cadence
Runs quarterly, and on every leaver
System
ITSM

Access review season is a spreadsheet exercise: export the entitlements, chase the managers, paste the answers back, hope the export was current.

What the agent does

Anvil reads live entitlements from the identity provider and the applications themselves, groups them by manager, and asks each one only about what changed since the last review. Dormant accounts — no authentication in ninety days, no ticket, no exception — are proposed for revocation with the evidence attached.

  • 2,400 accounts reviewed per quarter without a spreadsheet leaving the building
  • Revocations executed on approval, reversible for thirty days
  • The attestation pack assembled as the review runs, not after it

What auditors get

A record of who was asked, what they saw, what they said, and what changed as a result — with timestamps that come from the systems rather than from an email thread.