Method for performing automated systematic entitlement review

A system for performing automated systematic entitlement review, comprising:

• a data store tracking one or more software entitlements available to one or more users;
• a server enforcing the one or more entitlements by permitting or denying access to the one or more users to perform one or more given tasks;
• and
• non-transitory memory storing instructions that, when executed by a computer processor, cause the computer processor to:
• retrieve metadata concerning the one or more entitlements and the one or more users having those entitlements;
• generate a numerical score for assigning to each of the one or more entitlements;
• determine a probability of revocation for each user having each of the one or more entitlements, according to the numerical score assigned to each of the one or more entitlements;
• select a first one or more instances of an entitlement and its user for revocation, and a second one or more instances of an entitlement and its user to be retained without revocation;
• for each entitlement and for each user having that entitlement, use random number generation to revoke that entitlement for that user with a probability equal to the determined probability of revocation;
• automatically revoke access of the entitlements in the first one or more instances;
• and
• automatically notify the users in the first one or more instances of the automatic revocation.