+APP.2.2.A1 Planning Active Directory [Process Owner] (B)

APP.2.2.A1 Planning Active Directory [Process Owner] (B)

The domain functional level selected MUST be appropriate and as high as possible. The justification for this choice SHOULD be documented appropriately. An access control policy for Active Directory MUST be developed in accordance with the requirements at hand. Administrative delegations MUST be assigned restrictive authorisations that meet the requirements at hand. The planned Active Directory structure, including possible scheme changes, SHOULD be documented in a comprehensible manner.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.11 Failure or Disruption of Service Providers
blocks G 0.14 Interception of Information / Espionage
blocks G 0.15 Eavesdropping
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.26 Malfunction of Devices or Systems
blocks G 0.27 Lack of Resources
blocks G 0.32 Misuse of Authorisation
blocks G 0.36 Identity theft
blocks G 0.40 Denial of Service
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information