Skip to main content

Get Started: Continuous Compliance

Continuous compliance brings together access controls, risk monitoring, repeatable processes, and evidence for ongoing compliance reviews. As an IT Admin, you can use this guide to find the JumpCloud features that support each part of your workflow. This guide covers features you can configure today, preview capabilities, and features still in development.

Configuring Your Continuous Compliance Workflow​

Build your workflow around establishing access conditions, monitoring sign-in risk, automating repeatable tasks, and collecting evidence. Each section links to feature overviews and configuration guides.

Establishing Device Access Conditions​

Use Device Trust with conditional access policies to control access based on supported device conditions. These controls help you apply your organization's device security requirements when users access resources.

See the following resources to learn more:

Monitoring and Responding to Sign-In Risk​

Use Access Risk Detection to identify suspicious sign-in activity, investigate flagged events, and record your assessment. These insights help you determine when to take action to protect an account.

See the following resources to learn more:

Automating Repeatable Tasks​

Use Workflows to standardize recurring identity, device, and access tasks. Automating onboarding and offboarding helps you handle identity lifecycle tasks consistently as your environment changes.

See the following resources to learn more:

Collecting Evidence for Reviews​

Use Reporting to collect information about users, devices, and access for compliance reviews. Saved and scheduled reports help you gather that information on a recurring basis.

See JumpCloud Reports to learn more.

Controlling Privileged Access​

Privileged Access Management (PAM) helps you control and audit privileged access to servers, databases, and web resources. Use PAM to manage access to sensitive resources and retain evidence of privileged activity. Review the linked guide for availability and supported capabilities.

See Get Started: Privileged Access Management (PAM) to learn more.

Extending the Workflow with Preview Capabilities​

Preview capabilities support additional areas of identity and access governance. Review each linked guide for availability, prerequisites, and supported capabilities.

Governing Agent Access (Public Preview)​

Agent Identities and AI Gateway help you govern AI agents and their application connections. Establish accountable human ownership and manage agent access to business applications as part of your identity governance workflow.

See the following resources to learn more:

Reviewing Access Posture (Private Preview)​

Access Posture helps you identify and prioritize identity and access security gaps. Use its findings to review access configurations and determine which issues need attention, alongside the sign-in activity surfaced by Access Risk Detection.

See Get Started: JumpCloud Access Posture to learn more.

Reviewing Whether Access Is Still Needed (Private Preview)​

Access Certification helps you review existing access, remove permissions that are no longer needed, and retain evidence of review decisions. These reviews support ongoing oversight as people's roles and access needs change.

See Manage Access Certification to learn more.

Capabilities Under Development​

Capabilities in development build on the controls, monitoring, and reviews described above:

  • Access Posture: Broader visibility into identity and access security gaps across your environment.
  • Device Trust and Rule Builder: More flexibility in defining device conditions for access policies.
  • Access Certification: Expanded support for reviewing access and retaining evidence of review decisions.

Was this information helpful?