+IAM-05.05B

IAM-05.05B

For system components that are not production associated, the cloud service provider designs, implements and maintains appropriate controls for the prevention of orphan resources based on a risk assessment (cf. OIS-07).

Supplementary information

This criterion applies to identities that refer to single, multiple or non-human entities.

As an alternative to the regular reviews of access rights, time-bound access rights that automatically expire may also be issued.

Supplementary information

The system components meant here are system components in development, test or any other non-productive environments. Orphan resources are system components that have no assigned owner.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
is blocked by Removal of Temporary / Emergency Accounts
is blocked by Risk Assessment
is blocked by Risk Assessment