+Authentication mechanisms

Authentication mechanisms

System components in the Cloud Service Provider's area of responsibility that are used to provide the cloud service, authenticate users of the Cloud Service Provider's internal and external employees as well as system components that are involved in the Cloud Service Provider's automated authorisation processes. Access to the production environment requires twofactor or multifactor authentication. Within the production environment, user authentication takes place through passwords, digitally signed certificates or procedures that achieve at least an equivalent level of security. If digitally signed certificates are used, administration is carried out in accordance with the Guideline for Key Management (cf. CRY01). The password requirements are derived from a risk assessment and documented, communicated and provided in a password policy according to SP01. Compliance with the requirements is enforced by the configuration of the system components, as far as technically possible.
Additonal CriteriaAccess to the nonproduction environment requires twofactor or multifactor authentication. Within the nonproduction environment, users are authenticated using passwords, digitally signed certificates, or procedures that provide at least an equivalent level of security.
Supplementary Information - About the Criteria-

1. Overzicht

1.1 Referenties

1.2 Geïdentificeerde eisen

1.3 Gerelateerde regelingen

2. Geïdentificeerde eisen

Eisen

3. Gerelateerde regelingen

Regelingen