+APP.5.2.A3 Access Management and Access Rights (B)

APP.5.2.A3 Access Management and Access Rights (B)

In addition to its general access control policy, an organisation MUST create, adequately document, and apply an access control policy for the systems in its Exchange infrastructure.

The IT Operation Department MUST use server-side user profiles for computer-independent user access to Exchange data. It MUST adapt the default NTFS authorisations for the Exchange directory so that only authorised administrators and system accounts are allowed to access the data in this directory.

1. Pregled

1.1 Reference

1.2 Utvrđeni zahtjevi

1.3 Povezani propisi

2. Utvrđeni zahtjevi

Zahtjevi

3. Povezani propisi

Propisi

Povezani zadaci

Poveznice
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems