The 19 Workday security checks Black Cat runs

Black Cat SSPM evaluates 19 security policies against your Workday configuration on every scan, classifies each finding by risk, and provides remediation steps. Browse them by topic below.

How to connect Workday — what access Black Cat needs, and why.

• Identity, MFA & sign-in

  12 checks · highest severity: critical

• Access control & privilege

  3 checks · highest severity: high

Identity, MFA & sign-in (12)

• Workday User Without MFA Required  · severity: high
• Workday Dormant User Account  · severity: medium
• Terminated User With Active Account  · severity: critical
• User Without Manager Assigned  · severity: low
• Weak Password Policy  · severity: high
• SSO Not Enabled  · severity: high
• MFA Not Enforced  · severity: critical
• Excessive Session Timeout  · severity: medium
• No Account Lockout Policy  · severity: high
• Delegated Auth Certificate Expiring Soon  · severity: high
• Delegated Auth Allows Local Fallback  · severity: medium
• Account Lockout Duration Too Short  · severity: medium

Access control & privilege (3)

• Security Group With Excessive Members  · severity: medium
• Empty Security Group  · severity: low
• Security Group With Broad Domain Access  · severity: high

Other checks (4)