Steve Yeo, Sorenson Communications IT Director – IT Security
Govern Every Identity.
Enforce Every Policy.
Prove It to Any Auditor.
RSA® Governance & Lifecycle automates the full identity lifecycle—from provisioning to deprovisioning—while delivering continuous, AI-driven access governance across cloud, hybrid, and on-premises environments.
A complete identity governance and administration platform for government, finance, and high-assurance organizations.
Surpass compliance with continuous governance across cloud, hybrid, and on-premises environments.
Close the gap between policy and reality
End compliance theater with automated access certifications, SoD detection and enforcement.
One platform.
All identities.
Govern human users, non-human identities, machine accounts, and more from a single platform.
Better behavior. Better governance.
Integrated gamification capabilities accelerate certification cycles, improve decisions, and enhance security.
TELECOMMUNICATIONS
The identity governance standard.
The tools that financial services organizations, government agencies, and other high-assurance organizations need to answer the hardest questions.
Govern everyone
RSA Governance & Lifecycles answers the fundamental questions organizations must be able to answer at any moment: who has access? How did they get it? Should they still have it?
Automated Access reviews
Reduce reviewer fatigue with automated reviews and certifications, backed by gamification that keeps reviewers engaged and speeds up cycle times.
Segregation of duties (SoD) detection
Stop violations before they become audit findings.
Customizable compliance reports
Manage reporting for CJIS, HIPAA, IRS 1075, SOX, 23 NYCRR 500, PCI-DSS, NIST 800-53, FISMA, and more.
COMPLETE AUDIT TRAILS
Maintain a full historical record of every access request, approval, and change so you can answer any auditor’s question in minutes, not weeks.
Lifecycle automation
RSA Governance & Lifecycle automates identity provisioning and deprovisioning across the full joiner-mover-leaver workflow, ensuring all users have the right access at the right time—and nothing more.
Automated JML
Automate onboarding, role change, and offboarding workflows.
Role-based access controls (RBAC)
Align access requests, approval, and fulfillment workflows to business process.
Every identity, everywhere
Manage employee, contractor, and non-human identities across environments from a single platform.
Closed Loop Validation
Confirm that scheduled actions completed. When a connector removes access or provisions an account, the next collection cycle verifies it happened correctly.
Same governance. Any deployment.
Cloud, on-premises, or hybrid: RSA Governance & Lifecycle delivers the same capabilities in every model. Choose the deployment model that fits today, and move to a different one as your requirements change, without giving up a single capability.
Defensible governance shouldn’t depend on where you deploy. See the four-stage path from compliance theater to active defense.
FULL PARITY, EVERY DEPLOYMENT
The same capabilities in the cloud, on-premises, and hybrid, AI included. No reduced edition and no feature gaps, whichever model you choose.
CLOUD
Run governance without running infrastructure. Every capability, delivered and maintained by RSA.
ON-PREMISES AND AIR-GAPPED
Keep identity data, policy, and audit evidence on infrastructure you own, including air-gapped and classified environments.
HYBRID, GOVERNED AS ONE
Govern all applications from one platform, with the same policies, reviews, and controls across the cloud and on-premises.
Continuous governance takes AI.
Access changes every day, across more identities and applications than any team can review by hand. RSA Governance & Lifecycle uses AI to evaluate every entitlement, lifecycle event, and change as it happens. Governance stops being a quarterly campaign and becomes a continuous control.
Is your governance program built for auditors or for attackers? See where it stands on the four-stage path to continuous, defensible governance.
CONNECT EVERY SYSTEM AS IT COMES ONLINE
AI maps a new application’s schema to the governance model on its own. Every system comes under governance without an integration backlog.
UNDERSTAND RISK AS IT FORMS
AI flags risky access across peer groups and roles, like accumulated or stale entitlements, to focus review efforts where the risk is greatest.
MAKE EVERY DECISION DEFENSIBLE
At every lifecycle event, AI recommends what to grant, revoke, or certify based on peer access.
DELIVER EVIDENCE ON DEMAND
AI ties governance activity to control language and provides evidence for CJIS, NIST CSF 2.0, GDPR, HIPAA, and more.
Deployed where your mission operates. Governing what your risk demands.
Deployment Models
Deploy G&L wherever your mission operates, with full parity across every environment.
- On-premises
- Air-gapped / classified environments
- Private cloud
- Hybrid (cloud and on-premises)
What RSA Governance & Lifecycle Governs
G&L governs every identity with access to your systems, human or otherwise.
- Human identities (employees, contractors, seasonal workers, partners)
- Non-human identities (service accounts, bots, machine identities)
- Privileged and high-risk entitlements
- Third-party and inter-agency identity relationships
Discover RSA Governance & Lifecycle
Take the product tour to see how RSA Governance & Lifecycle manages your risk surface, simplifies compliance, reviews Zero Trust posture, and completes access reviews:
Frequently asked questions
How does RSA Governance & Lifecycle use AI?
RSA Governance & Lifecycle applies AI-driven analytics to continuously evaluate entitlements and access patterns across connected systems. The platform identifies high-risk entitlement combinations, surfaces anomalous access behavior, and provides contextual guidance during access reviews—helping reviewers focus on what matters rather than approving access they lack the context to evaluate. Risk insights are surfaced in dynamic dashboards with actionable recommendations.
What deployment models does RSA Governance & Lifecycle support?
RSA Governance & Lifecycle supports on-premises, air-gapped and classified, private cloud, and hybrid (cloud and on-premises) deployment models. This range of deployment options makes it suitable for federal agencies and financial institutions operating in environments where cloud-only solutions are not viable.
How does RSA Governance & Lifecycle govern third-party and contractor identities?
RSA Governance & Lifecycle governs third-party, contractor, and partner identities within the same platform and policies as full-time employees. Automated workflows trigger deprovisioning when engagements end, eliminating the orphaned accounts that represent a persistent risk in organizations relying on a complex mix of internal and external workers.
SURPASS COMPLIANCE.
Close the gap between policy and reality.
Included