+ORP.4.A17 Suitable Selection of Identity and Access Management Systems [IT Operation Department] (S)

ORP.4.A17 Suitable Selection of Identity and Access Management Systems [IT Operation Department] (S)

An organisation's identity and access management system SHOULD be appropriate for its relevant business processes, organisational structures, and workflows, as well as for its protection needs. The identity and access management system SHOULD be able to map the specifications of the organisation for handling identities and authorisations. The identity and access management system chosen SHOULD support the principle of role separation. The identity and access management system SHOULD be adequately protected against attacks.

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems