01
Inventory identities, roles and entitlements
Apply this point to a real GitHub Actions Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
GitHub Actions Academy · Compliance Center
Access Certification
Review privileged and standard access against current responsibilities.
Objective: Remove unnecessary access and demonstrate accountable approval.
Practical guidance
Prepare and design
02
Identify owners and reviewers
Apply this point to a real GitHub Actions Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
03
Define high-risk access criteria
Apply this point to a real GitHub Actions Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
Practical guidance
Operate and improve
01
Run periodic reviews
Apply this point to a real GitHub Actions Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
02
Remove or remediate inappropriate access
Apply this point to a real GitHub Actions Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
03
Track unresolved decisions
Apply this point to a real GitHub Actions Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
Practical guidance
Evidence and governance
01
Archive approvals and removals
Apply this point to a real GitHub Actions Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
02
Report overdue reviews
Apply this point to a real GitHub Actions Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
03
Improve role design
Apply this point to a real GitHub Actions Academy design, delivery or operational scenario and record the evidence used to validate the outcome.