Nexis Controle 3.4

Managing access to corporate resources is widely underestimated, and many organizations still rely on enterprise-wide role design to turn complex authorization landscapes into manageable structures. While role models can support efficient security administration and even organizational process design, role lifecycle management is difficult and failure-prone unless supported by mature business processes, strong tooling, and user-friendly, traceable workflows. Enterprise Role Management (ERM) is positioned as a strategic, continuous discipline that complements policy management by improving administrative efficiency and supporting compliance with legal, regulatory, and internal requirements.

ERM is not a one-time role definition exercise; it requires ongoing adaptation of roles by adjusting embedded entitlements, adding new roles, onboarding new applications and entitlements, and retiring obsolete roles. These processes also must satisfy governance demands such as least privilege and Segregation of Duties (SoD), preventing contradictory access within business transactions. Implementing ERM requires coordinated involvement from multiple stakeholders across the organization, clear administrative processes, and appropriate tool support.

Nexis Controle 3.4 is presented as a specialized solution for role analytics, role engineering, and sustainable role lifecycle management, usable as a stand-alone product or as an add-on integrated with existing IAM/IGA environments and target systems such as Active Directory or SAP. The product provides identity and role analytics, access governance, attestations and recertification, automated role mining, entitlement management, and access clean-up. It has evolved to include 13 analysis grids for multidimensional correlation and drill-down analyses, plus resource-level analytics. Version 3.4 strengthens policy management, includes mitigation and exception approvals for violations, and introduces a redesigned, dynamic workflow engine with around 100 configurable standard workflows, delegation, escalation, and version control. Deployment options include on-premises appliance or cloud service, with licensing via perpetual or subscription models, supporting both short-term clean-up projects and long-term continuous compliance and role governance.

• Enterprise Role Management requires continuous updates to roles, including adjusting access rights, adding roles, onboarding new applications, and retiring obsolete roles.
• Least privilege requires granting only minimal access rights.
• Segregation of Duties requirements prevent a single user from having enough access to perform contradictory steps in one transaction or process.
• Nexis is a German software vendor based in Regensburg, Germany.
• Nexis Controle 3.4 can run stand-alone or integrate with existing IAM systems and can connect directly to target systems such as Active Directory or SAP.
• Nexis Controle covers role and identity analytics, attestation and periodic access recertification, visual role modeling, automated role mining, entitlement management, and access clean-up.
• Nexis Controle increased its analysis grids from one to 13 in the current version.
• Nexis Controle 3.4 adds policy management enhancements including mitigation processes with exception rules and approvals for policy violations.
• Approximately 100 standard workflows are included for full role lifecycle management, and workflows are configurable with graphical modeling and protected by version control.
• From 2018 to 2019, Nexis more than doubled its turnover and company size.

• “Managing access to corporate resources remains an underestimated challenge for many businesses.”
• “Although role lifecycle management has proven to be a complex set of tasks with lots of obstacles and a high potential of failure, this approach can serve both for efficient security management and as a tool for organizational processes.”
• “This goes far beyond a unique approach to identifying initial role definitions, a point at which many initial role projects stop.”
• “Defining or reviewing the appropriate role portfolio … must not be a one-time exercise.”
• “Instead, ERM aims to define and implement a sustainable, continuous set of clearly defined role management processes.”
• “ERM requires the expertise of various organizational stakeholders, grouped together in an enterprise-wide process framework.”
• “Nexis Controle 3.4 is a mature representative … designed to run stand-alone or interact with existing Identity and Access Management systems while adding what the vendor refers to as Identity and Access Intelligence.”
• “The current version Nexis Controle 3.4 offers an entirely redesigned workflow engine, which is fully dynamic and adaptable.”
• “All workflows are configurable using graphical modelling and safeguarded by version control.”
• “In the right context, the solution quickly delivers efficient results by leveraging intelligent analytics and an intuitive, visualizing user interface.”