+APP.1.4.A5 Minimising and Checking App Authorisations [Process Owner] (B)

APP.1.4.A5 Minimising and Checking App Authorisations [Process Owner] (B)

Security-relevant authorisation settings MUST be established so that they cannot be changed by users or apps. If this is not technically possible, the authorisation settings MUST be regularly checked and reset.

Before an app is introduced in an organisation, it MUST be ensured that it only has the minimum app authorisations required for its function. Authorisations that are not absolutely necessary MUST be scrutinised and, if necessary, disabled.

1. Apžvalga

1.1 Nuorodos

1.2 Nustatyti reikalavimai

1.3 Susiję teisės aktai

2. Nustatyti reikalavimai

Reikalavimai

3. Susiję teisės aktai

Teisės aktai

Susietos užduotys

Saitai
blocks G 0.14 Interception of Information / Espionage
blocks G 0.15 Eavesdropping
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.32 Misuse of Authorisation
blocks G 0.38 Misuse of Personal Information
blocks G 0.39 Malware
blocks G 0.42 Social Engineering