+IAM-05.04B

IAM-05.04B

When revoking identities, the system ensures that all production associated system components (e.g., virtual machines, storage, access rights) are identified, reassigned, or deleted to prevent the creation of orphaned resources. Clear processes and technical controls are established to identify and handle any orphaned resources that occur despite preventive measures, ensuring their timely reassignment or secure deletion.

Supplementary information

This criterion applies to identities that refer to single, multiple or non-human entities.

As an alternative to the regular reviews of access rights, time-bound access rights that automatically expire may also be issued.

1. Επισκόπηση

1.1 Παραπομπές

1.2 Εντοπισμένες απαιτήσεις

1.3 Σχετικοί κανονισμοί

2. Εντοπισμένες απαιτήσεις

Απαιτήσεις

3. Σχετικοί κανονισμοί

Κανονισμοί

Συνδεδεμένα ζητήματα

Συνδέσεις
is blocked by Decommissioning
is blocked by Removal of Temporary / Emergency Accounts