💼 47c segregation of duty controls which prevent personnel from deploying their own software changes to production;

• Contextual name: 💼 47c segregation of duty controls which prevent personnel from deploying their own software changes to production;
• ID: /frameworks/apra-cpg-234/18/47/c
• Located in: 💼 47 APRA envisages that a regulated entity would implement controls to manage changes to information assets, including changes to hardware, software, data, and configuration (both where the change is planned and in response to an emergency) with the aim of maintaining information security.

Description

Empty...

Similar

• Internal
  • ID: dec-c-87575681

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags

Policies (5)

Policy	Logic Count	Flags
📝 AWS Account Root User has active access keys 🟢	1	🟢 x6
📝 AWS EC2 Instance IAM role is not attached 🟢	1	🟢 x6
📝 AWS IAM Policy allows full administrative privileges 🟢	1	🟢 x6
📝 AWS IAM User has inline or directly attached policies 🟢	1	🟠 x1, 🟢 x5
📝 Azure Key Vault Role Based Access Control is not enabled 🟢	1	🟢 x6

Internal Rules

Rule	Policies	Flags
✉️ dec-x-0a7801fb	1
✉️ dec-x-6c93750d	1
✉️ dec-x-157aa4b9	1
✉️ dec-x-4157c58a	1
✉️ dec-x-c8041456	1