+PSS-05.02B

PSS-05.02B

For privileged users, IT components or applications under the responsibility of the cloud service customer, these authentication mechanisms can be enforced by the cloud service customer.

Supplementary information

IT components in the sense of this criterion are independently usable objects with external interfaces that can be connected with other IT components.

Access points in the sense of this criterion are those that can be accessed by users, IT components or applications via networks (for users, for example, the login screen on the publicly accessible website of the cloud service provider).

Multi-factor authentication should be enforced and can e.g. be performed with cryptographic certificates, smart cards or tokens.

1. Ülevaade

1.1 Viited

1.2 Tuvastatud nõuded

1.3 Seotud regulatsioonid

2. Tuvastatud nõuded

Nõuded

3. Seotud regulatsioonid

Regulatsioonid

Lingitud teemad

Lingid
is blocked by Privileged Account Management (PAM)
is blocked by Multi-Factor Authentication (MFA)