|
+AM-02.05B |
AM-02.05BThe cloud service provider maintains lists of all users under its responsibility who have access to a specific resource, along with their respective access rights. Supplementary information Cloud service providers who procure their cloud infrastructure as virtual infrastructure from service organisation (e.g. virtual machines or containers) may use tools provided by the service organisation to inventory those assets, insofar as the cloud service provider deems these suitable based on their asset management framework. In practice, the implementation of the asset inventory can vary greatly depending on the number, size and complexity of provided cloud services. Supplementary information These lists can be, but do not have to be, provided by the inventory system established through the criteria AM-02, AM-03 and AM-04. 1. Oversigt
1.1 Referencer1.2 Identificerede krav1.3 Relaterede reguleringer2. Identificerede krav
3. Relaterede reguleringer
Linkede sager
|