+IAM-05.02B

IAM-05.02B

The review is carried out by authorised persons from the cloud service provider's organisational units, who can assess the appropriateness of the assigned access rights based on their knowledge of the task areas of the personnel or system components.

Supplementary information

This criterion applies to identities that refer to single, multiple or non-human entities.

As an alternative to the regular reviews of access rights, time-bound access rights that automatically expire may also be issued.

1. Yleiskatsaus

1.1 Viittaukset

1.2 Tunnistetut vaatimukset

1.3 Liittyvät säädökset

2. Tunnistetut vaatimukset

Vaatimukset

3. Liittyvät säädökset

Säädökset

Linkitetyt tehtävät

Linkit
is blocked by Periodic Review of Individual & Service Account Privileges