11.5.1 The relevant entities shall manage the full life cycle of identities of network and information …

Requirement

The relevant entities shall manage the full life cycle of identities of network and information systems and their users.

Guidance

• Establish and maintain an inventory of all identities managed in the entity.
  • The inventory should include both user and privileged or system administrator identities. The inventory should contain, as a minimum, the person’s name, username, start/stop dates and the level of privileges for each identity .
  • The inventory should also include all service identities and have these identity records as a minimum including department owner, review date, purpose and the level of privileges for each service identity.

Examples of evidence

• Documented policy or procedure related to identity management, if available.
• Reports from internal or external audits verifying that the management of identities aligns with the policy and regulatory requirements.

1. Ħarsa ġenerali

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

3. Regolamenti relatati

Kwistjonijiet marbuta

• ENISA -