+11.5. Identification
---+11.5.1. The relevant entities shall manage the full life cycle of identities of network and …
---+11.5.2. For that purpose, the relevant entities shall: (a) set up unique identities for network and …
---+11.5.3. The relevant entities shall only permit identities assigned to multiple persons, such as …
---+11.5.4. The relevant entities shall regularly review the identities for network and information …

11.5. Identification

11.5.   Identification

1. Overview

,
11.5.1. The relevant entities shall manage the full life cycle of identities of network and …

11.5.1.

 The relevant entities shall manage the full life cycle of identities of network and information systems and their users.
11.5.2. For that purpose, the relevant entities shall: (a) set up unique identities for network and …

11.5.2.

 For that purpose, the relevant entities shall:

(a)

set up unique identities for network and information systems and their users;

(b)

link the identity of users to a single person;

(c)

ensure oversight of identities of network and information systems;

(d)

apply logging to the management of identities.
11.5.3. The relevant entities shall only permit identities assigned to multiple persons, such as …

11.5.3.

 The relevant entities shall only permit identities assigned to multiple persons, such as shared identities, where they are necessary for business or operational reasons and are subject to an explicit approval process and documentation. The relevant entities shall take identities assigned to multiple persons into account in the cybersecurity risk management framework referred to in point 2.1.
11.5.4. The relevant entities shall regularly review the identities for network and information …

11.5.4.

 The relevant entities shall regularly review the identities for network and information systems and their users and, if no longer needed, deactivate them without delay.

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

Requirements

3. Related Standards

Standards

Linked Issues

Issuelinks
is related to 11.5 Identification