+ORP.4.A3 Documentation of User IDs and Rights Profiles [IT Operation Department] (B)
|
1. Overview
ORP.4.A3 Documentation of User IDs and Rights Profiles [IT Operation Department] (B)
The user IDs, user groups, and rights profiles that have been approved and created MUST be documented. The documentation of authorised users, user groups, and rights profiles MUST be examined regularly to see if it reflects the rights actually assigned to the users and profiles, and if the rights granted still meet the security requirements and are appropriate for the current tasks of the corresponding users. The documentation MUST be protected against unauthorised access. If the documentation is made available in electronic form, it SHOULD be integrated into a backup procedure.
1.1 References
1.2 Identified Requirements
1.2 Related Regulation
2. Identified Requirements
Requirements
| Source |
Requirement |
3. Related Regulations
Regulations
| Source |
Regulation |
|