+11. Access control (Article 21(2), points (i) and (j), of Directive (EU) 2022/2555)
---+11.1. Access control policy
------+11.1.1. For the purpose of Article 21(2), point (i) of Directive (EU) 2022/2555, the relevant …
------+11.1.2. The policies referred to in point 11.1.1. shall: (a) address access by persons, including …
------+11.1.3. The relevant entities shall review and, where appropriate, update the policies at planned …
---+11.2. Management of access rights
------+11.2.1. The relevant entities shall provide, modify, remove and document access rights to network …
------+11.2.2. The relevant entities shall: (a) assign and revoke access rights based on the principles of …
------+11.2.3. The relevant entities shall review access rights at planned intervals and shall modify them …
---+11.3. Privileged accounts and system administration accounts
------+11.3.1. The relevant entities shall maintain policies for management of privileged accounts and …
------+11.3.2. The policies referred to in point 11.3.1 shall: (a) establish strong identification …
------+11.3.3. The relevant entities shall review access rights of privileged accounts and system …
---+11.4. Administration systems
------+11.4.1. The relevant entities shall restrict and control the use of system administration systems …
------+11.4.2. For that purpose, the relevant entities shall: (a) only use system administration systems …
---+11.5. Identification
------+11.5.1. The relevant entities shall manage the full life cycle of identities of network and …
------+11.5.2. For that purpose, the relevant entities shall: (a) set up unique identities for network and …
------+11.5.3. The relevant entities shall only permit identities assigned to multiple persons, such as …
------+11.5.4. The relevant entities shall regularly review the identities for network and information …
---+11.6. Authentication
------+11.6.1. The relevant entities shall implement secure authentication procedures and technologies …
------+11.6.2. For that purpose, the relevant entities shall: (a) ensure the strength of authentication is …
------+11.6.3. The relevant entities shall to the extent feasible use state-of-the-art authentication …
------+11.6.4. The relevant entities shall review the authentication procedures and technologies at …
---+11.7. Multi-factor authentication
------+11.7.1. The relevant entities shall ensure that users are authenticated by multiple authentication …
------+11.7.2. The relevant entities shall ensure that the strength of authentication is appropriate for …
|
11. Access control (Article 21(2), points (i) and (j), of Directive (EU) 2022/2555)
11. Access control (Article 21(2), points (i) and (j), of Directive (EU) 2022/2555)
1. Overzicht
1.1 Referenties
1.2 Geïdentificeerde eisen
1.3 Gerelateerde standaarden
2. Geïdentificeerde eisen
3. Gerelateerde standaarden
Gekoppelde issues
|