+ORP.4.A3 Documentation of User IDs and Rights Profiles [IT Operation Department] (B)

ORP.4.A3 Documentation of User IDs and Rights Profiles [IT Operation Department] (B)

The user IDs, user groups, and rights profiles that have been approved and created MUST be documented. The documentation of authorised users, user groups, and rights profiles MUST be examined regularly to see if it reflects the rights actually assigned to the users and profiles, and if the rights granted still meet the security requirements and are appropriate for the current tasks of the corresponding users. The documentation MUST be protected against unauthorised access. If the documentation is made available in electronic form, it SHOULD be integrated into a backup procedure.

1. Prezentare generală

1.1 Referințe

1.2 Cerințe identificate

1.3 Reglementări asociate

2. Cerințe identificate

Cerințe

3. Reglementări asociate

Reglementări

Tichete legate

Legături
blocks G 0.18 Poor Planning or Lack of Adaptation