+IAM-03.03AS
|
1. Overview
IAM-03.03AS
The cloud service provider documents and implements a process for monitoring stolen and compromised credentials, which also includes disabling any identity for which an issue is identified. This process is implemented on all identities under the responsibility of the cloud service provider.
This criterion applies to identities that refer to single, multiple or non-human entities.
This process can be performed automatically, or manually by authorised personnel.
1.1 References
1.2 Identified Requirements
1.2 Related Regulation
2. Identified Requirements
Requirements
| Source |
Requirement |
3. Related Regulations
Regulations
| Source |
Regulation |
|