+IAM-05.01B

IAM-05.01B

Identities and the associated access rights of internal and external personnel of the cloud service provider as well as of system components that play a role in automated authorisation processes of the cloud service provider are reviewed at least once a year and in case of significant changes to the cloud service to ensure that they still correspond to the actual area of use.

Supplementary information

This criterion applies to identities that refer to single, multiple or non-human entities.

As an alternative to the regular reviews of access rights, time-bound access rights that automatically expire may also be issued.

Supplementary information

If a review is caused by significant changes to the cloud service, only the identities and access rights affected by the change need to be included in the review.

1. Apžvalga

1.1 Nuorodos

1.2 Nustatyti reikalavimai

1.3 Susiję teisės aktai

2. Nustatyti reikalavimai

Reikalavimai

3. Susiję teisės aktai

Teisės aktai

Susietos užduotys

Saitai
is blocked by Periodic Review of Individual & Service Account Privileges