|
+AM-08.03B |
AM-08.03BIf assets cannot be returned prior to or on the day of the termination, the cloud service provider removes the access rights of the personnel no later than the date of termination Supplementary information The criterion essentially concerns mobile devices (e.g. notebooks, tablets, smartphones, FIDO2 security keys, etc.), especially if confidential information is stored on them that can be used, in the event of unauthorised access, to obtain privileged access to the cloud service (e.g. if these are used as security tokens for authentication). Supplementary information The removal of access rights of terminated personnel can be implemented by e.g. disabling their identity on the device. 1. Översikt
1.1 Referenser1.2 Identifierade krav1.3 Relaterade regleringar2. Identifierade krav
3. Relaterade regleringar
Länkade ärenden
|