💼 47c segregation of duty controls which prevent personnel from deploying their own software changes to production;
- Contextual name: 💼 47c segregation of duty controls which prevent personnel from deploying their own software changes to production;
- ID:
/frameworks/apra-cpg-234/18/47/c - Located in: 💼 47 APRA envisages that a regulated entity would implement controls to manage changes to information assets, including changes to hardware, software, data, and configuration (both where the change is planned and in response to an emergency) with the aim of maintaining information security.
Description
Empty...
Similar
- Internal
- ID:
dec-c-87575681
- ID:
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|
Policies (5)
| Policy | Logic Count | Flags |
|---|---|---|
| 📝 AWS Account Root User has active access keys 🟢 | 1 | 🟢 x6 |
| 📝 AWS EC2 Instance IAM role is not attached 🟢 | 1 | 🟢 x6 |
| 📝 AWS IAM Policy allows full administrative privileges 🟢 | 1 | 🟢 x6 |
| 📝 AWS IAM User has inline or directly attached policies 🟢 | 1 | 🟠 x1, 🟢 x5 |
| 📝 Azure Key Vault Role Based Access Control is not enabled 🟢 | 1 | 🟢 x6 |
Internal Rules
| Rule | Policies | Flags |
|---|---|---|
| ✉️ dec-x-0a7801fb | 1 | |
| ✉️ dec-x-6c93750d | 1 | |
| ✉️ dec-x-157aa4b9 | 1 | |
| ✉️ dec-x-4157c58a | 1 | |
| ✉️ dec-x-c8041456 | 1 |