+IAM-03.01B

IAM-03.01B

The cloud service provider has a risk-based procedure in place for managing identities (cf. IAM-01), taking into account the types of data accessible via the identities of the internal and external personnel.

Supplementary information

This criterion applies to identities that refer to single, multiple or non-human entities.

1. Overview

Summary	Standard

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements
Source	Requirement

3. Related Regulations

Regulations
Source	Regulation

Linked Issues

Issuelinks
Linktype	Issue
is blocked by	Account Management
is blocked by	Account Management
is blocked by	Risk Assessment
is blocked by	Risk Assessment

BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)