IAM-05.02B
The review is carried out by authorised persons from the cloud service provider's organisational units, who can assess the appropriateness of the assigned access rights based on their knowledge of the task areas of the personnel or system components. Supplementary information This criterion applies to identities that refer to single, multiple or non-human entities. As an alternative to the regular reviews of access rights, time-bound access rights that automatically expire may also be issued.
1. Overview
1.1 References
1.2 Identified Requirements
1.3 Related Regulations
2. Identified Requirements
Requirements
| Source |
Requirement |
3. Related Regulations
Regulations
| Source |
Regulation |
Linked Issues
|