+OPS.3.1.A11 Site, System, and Data Access Control [Central Administration] (S)

OPS.3.1.A11 Site, System, and Data Access Control [Central Administration] (S)

Site, system, and data access authorisations SHOULD be regulated for the employees of both outsourcing service providers and outsourcing customers. It SHOULD also be specified which authorisations are to be granted to auditors and other inspectors. Rights SHOULD always only be granted when they are necessary to perform a task. There SHOULD be a controlled procedure for granting, managing, and withdrawing authorisations.

1. Översikt

1.1 Referenser

1.2 Identifierade krav

1.3 Relaterade regleringar

2. Identifierade krav

Krav

3. Relaterade regleringar

Regleringar

Länkade ärenden

Länkar
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems