💼 1 Identity and access management controls would ideally ensure access to information assets is only granted where a valid business need exists, and only for as long as access is required. Access is typically granted to users, special purpose system accounts, and information assets such as services and other software.
- Contextual name: 💼 1 Identity and access management controls would ideally ensure access to information assets is only granted where a valid business need exists, and only for as long as access is required. Access is typically granted to users, special purpose system accounts, and information assets such as services and other software.
- ID:
/frameworks/apra-cpg-234/c/1 - Located in: 💼 Attachment C - Identity and access
Description
Empty...
Similar
- Internal
- ID:
dec-c-f430a199
- ID:
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|
Policies (3)
| Policy | Logic Count | Flags |
|---|---|---|
| 📝 AWS EC2 Instance IAM role is not attached 🟢 | 1 | 🟢 x6 |
| 📝 AWS IAM User has inline or directly attached policies 🟢 | 1 | 🟠 x1, 🟢 x5 |
| 📝 Azure Key Vault Role Based Access Control is not enabled 🟢 | 1 | 🟢 x6 |
Internal Rules
| Rule | Policies | Flags |
|---|---|---|
| ✉️ dec-x-6c93750d | 1 | |
| ✉️ dec-x-4157c58a | 1 | |
| ✉️ dec-x-c8041456 | 1 |