Access Baseline Drift Monitoring Agentic Workflow Automation
Description
Coordinate multistep tasks for access baseline drift monitoring: gather data, build an evidence package, draft analysis, route for review, and record decisions with audit logs. The MVP would connect ICAM, SailPoint, MyAuth, ERP roles, audit logs, control catalogs, system access reviews and produce read-only recommendations for DoD CIO, Component CIO/FM, System owners, OUSD(C).
AI / analytics pattern
agentic AI + workflow orchestration
Automation level / stage
supervised workflow automation
Expected benefit
End-to-end productivity gain while preserving human signoff and auditability.
Audit / financial statement impact
Control environment; reliability of financial systems and reports
Controls / human review
Human approval required before posting, payment, denial, personnel action, or official audit response; model validation; drift monitoring; exception sampling; full prompt/data/output logging. Agent must operate in read-only or draft mode during MVP; all postings/payments/responses require named human approval.
Data needed
ICAM, SailPoint, MyAuth, ERP roles, audit logs, control catalogs, system access reviews; master/reference data; audit logs; policy/control requirements; prior exceptions; relevant document evidence.
Possible metrics
cycle time reduction; workflow completion rate; human override rate; audit log completeness
MVP scope
Start with one Component/reporting entity and one subprocess (access baseline drift monitoring) for two close/audit cycles; read-only outputs first.
Related material weakness / control objective
Systems control environment and IT access controls