+IA-12(01) Supervisor Authorization
|
IA-12(01) Supervisor Authorization
Control
Require that the registration process to receive an account for logical access includes supervisor or sponsor authorization.
Discussion
Including supervisor or sponsor authorization as part of the registration process provides an additional level of scrutiny to ensure that the user’s management chain is aware of the account, the account is essential to carry out organizational missions and functions, and the user’s privileges are appropriate for the anticipated responsibilities and authorities within the organization.
Assessment Objective
the registration process to receive an account for logical access includes supervisor or sponsor authorization.
Assessment Method
Examine
Identification and authentication policy
procedures addressing identity proofing
system security plan
other relevant documents or records
Interview
Organizational personnel with system operations responsibilities
organizational personnel with information security responsibilities
system/network administrators
system developers
organizational personnel with identification and authentication responsibilities
1. Übersicht
1.1 Referenzen
1.2 Identifizierte Anforderungen
1.3 Zugehörige Regulierungen
2. Identifizierte Anforderungen
Anforderungen
| Quelle |
Anforderung |
3. Zugehörige Regulierungen
Regulierungen
| Quelle |
Regulierung |
Verknüpfte Vorgänge
|