+IAM-03.03B

IAM-03.03B

The cloud service provider documents and implements a process for monitoring stolen and compromised credentials, which also includes disabling any identity for which an issue is identified. This process is implemented on all identities under the responsibility of the cloud service provider that have privileged access rights.

Supplementary information

This criterion applies to identities that refer to single, multiple or non-human entities.

Supplementary information

This process can be performed automatically, or manually by authorised personnel.

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
is blocked by Authenticator Management
is blocked by Threat Intelligence Feeds