Context aware recertification

A computer program product comprising a non-transitory computer readable medium having a computer readable program stored therein, wherein the computer readable program, when executed on a computing device of a data processing system, causes the computing device to:

• collect, from a system resource of the data processing system, access information representative of a pattern of access of the system resource by a user access entitlement;
• determine that recertification of the user access entitlement, with regard to the system resource, is to be performed;
• determine at least one first access metric associated with the user access entitlement based on the access information for the user access entitlement;
• and
• output a recertification request graphical user interface to a user based on the pattern of access, wherein the recertification request graphical user interface comprises:
• a representation of a comparison of the at least one first access metric, associated with the user access entitlement, with one or more second access metrics associated with one or more other user access entitlements, and
• one or more graphical user interface elements for receiving a user input specifying acceptance or denial of the recertification of the user access entitlement, wherein the at least one first access metric and the one or more second access metrics comprise values indicative of previous access operations by corresponding user access entitlements.

An apparatus, comprising:

• a processor;
• and
• a memory coupled to the processor, wherein the memory comprises instructions which, when executed by the processor, cause the processor to:
• collect, from a system resource of the data processing system, access information representative of a pattern of access of the system resource by a user access entitlement;
• determine that recertification of the user access entitlement, with regard to the system resource, is to be performed;
• determine at least one first access metric associated with the user access entitlement based on the access information for the user access entitlement;
• and
• output a recertification request graphical user interface to a user based on the pattern of access, wherein the recertification request graphical user interface comprises:
• a representation of a comparison of the at least one first access metric, associated with the user access entitlement, with one or more second access metrics associated with one or more other user access entitlements, and
• one or more graphical user interface elements for receiving a user input specifying acceptance or denial of the recertification of the user access entitlement, wherein the at least one first access metric and the one or more second access metrics comprise values indicative of previous access operations by corresponding user access entitlements.