+ORP.4.A7 Assignment of Data Access Rights [IT Operation Department] (B)

ORP.4.A7 Assignment of Data Access Rights [IT Operation Department] (B)

The data access rights that are to be granted to or withdrawn from certain people in certain roles MUST be defined. If data access resources like chip cards or tokens are used, their issue and withdrawal MUST be documented. Users SHOULD be trained in the proper use of chip cards or tokens. Authorised persons SHOULD be blocked temporarily if they are to be absent for a longer period of time.

1. Áttekintés

1.1 Hivatkozások

1.2 Azonosított követelmények

1.3 Kapcsolódó szabályozások

2. Azonosított követelmények

Követelmények

3. Kapcsolódó szabályozások

Szabályozások

Kapcsolt feladatok

Kapcsolatok
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.29 Violations of Laws or Regulations