|
+IAM-05.05B |
IAM-05.05BFor system components that are not production associated, the cloud service provider designs, implements and maintains appropriate controls for the prevention of orphan resources based on a risk assessment (cf. OIS-07). Supplementary information This criterion applies to identities that refer to single, multiple or non-human entities. As an alternative to the regular reviews of access rights, time-bound access rights that automatically expire may also be issued. Supplementary information The system components meant here are system components in development, test or any other non-productive environments. Orphan resources are system components that have no assigned owner. 1. Resumen
1.1 Referencias1.2 Requisitos identificados1.3 Regulaciones relacionadas2. Requisitos identificados
3. Regulaciones relacionadas
Incidencias vinculadas
|