+ORP.4.A17 Suitable Selection of Identity and Access Management Systems [IT Operation Department] (S)

ORP.4.A17 Suitable Selection of Identity and Access Management Systems [IT Operation Department] (S)

An organisation's identity and access management system SHOULD be appropriate for its relevant business processes, organisational structures, and workflows, as well as for its protection needs. The identity and access management system SHOULD be able to map the specifications of the organisation for handling identities and authorisations. The identity and access management system chosen SHOULD support the principle of role separation. The identity and access management system SHOULD be adequately protected against attacks.

1. Áttekintés

1.1 Hivatkozások

1.2 Azonosított követelmények

1.3 Kapcsolódó szabályozások

2. Azonosított követelmények

Követelmények

3. Kapcsolódó szabályozások

Szabályozások

Kapcsolt feladatok

Kapcsolatok
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems