+APP.1.4.A5 Minimising and Checking App Authorisations [Process Owner] (B)

APP.1.4.A5 Minimising and Checking App Authorisations [Process Owner] (B)

Security-relevant authorisation settings MUST be established so that they cannot be changed by users or apps. If this is not technically possible, the authorisation settings MUST be regularly checked and reset.

Before an app is introduced in an organisation, it MUST be ensured that it only has the minimum app authorisations required for its function. Authorisations that are not absolutely necessary MUST be scrutinised and, if necessary, disabled.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.14 Interception of Information / Espionage
blocks G 0.15 Eavesdropping
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.32 Misuse of Authorisation
blocks G 0.38 Misuse of Personal Information
blocks G 0.39 Malware
blocks G 0.42 Social Engineering