Skip to main content

πŸ’Ό 4 Regulated entities would typically put in place processes to ensure that identities and credentials are issued, managed, verified, revoked and audited for authorised devices, users and software/processes.

  • Contextual name: πŸ’Ό 4 Regulated entities would typically put in place processes to ensure that identities and credentials are issued, managed, verified, revoked and audited for authorised devices, users and software/processes.
  • ID: /frameworks/apra-cpg-234/c/4
  • Located in: πŸ’Ό Attachment C - Identity and access

Description​

Empty...

Similar​

  • Internal
    • ID: dec-c-af51c8ae

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags

Policies (8)​

PolicyLogic CountFlags
πŸ“ AWS Account IAM Password Policy Number of passwords to remember is not set to 24 🟒1🟒 x6
πŸ“ AWS EC2 Instance IAM role is not attached 🟒1🟒 x6
πŸ“ AWS IAM User Access Keys are not rotated every 90 days or less 🟒1🟒 x6
πŸ“ AWS IAM User has inline or directly attached policies 🟒1🟠 x1, 🟒 x5
πŸ“ AWS IAM User MFA is not enabled for all users with console password 🟒1🟒 x6
πŸ“ AWS KMS Symmetric CMK Rotation is not enabled 🟒1🟒 x6
πŸ“ AWS S3 Bucket MFA Delete is not enabled 🟠🟒1🟠 x1, 🟒 x6
πŸ“ Azure Key Vault Role Based Access Control is not enabled 🟒1🟒 x6

Internal Rules​

RulePoliciesFlags
βœ‰οΈ dec-x-4d6fee7a1
βœ‰οΈ dec-x-6c93750d1
βœ‰οΈ dec-x-4157c58a1
βœ‰οΈ dec-x-b92b08f41
βœ‰οΈ dec-x-bcb0c78f1
βœ‰οΈ dec-x-c80414561
βœ‰οΈ dec-x-f7c2faac1
βœ‰οΈ dec-z-bb7312921