+ORP.4.A3 Documentation of User IDs and Rights Profiles [IT Operation Department] (B)

ORP.4.A3 Documentation of User IDs and Rights Profiles [IT Operation Department] (B)

The user IDs, user groups, and rights profiles that have been approved and created MUST be documented. The documentation of authorised users, user groups, and rights profiles MUST be examined regularly to see if it reflects the rights actually assigned to the users and profiles, and if the rights granted still meet the security requirements and are appropriate for the current tasks of the corresponding users. The documentation MUST be protected against unauthorised access. If the documentation is made available in electronic form, it SHOULD be integrated into a backup procedure.

1. Yleiskatsaus

1.1 Viittaukset

1.2 Tunnistetut vaatimukset

1.3 Liittyvät säädökset

2. Tunnistetut vaatimukset

Vaatimukset

3. Liittyvät säädökset

Säädökset

Linkitetyt tehtävät

Linkit
blocks G 0.18 Poor Planning or Lack of Adaptation