Skip to main content

💼 A.9.2.1 User registration and de-registration

  • Contextual name: 💼 A.9.2.1 User registration and de-registration
  • ID: /frameworks/iso-iec-27001-2013/09/02/01
  • Located in: 💼 A.9.2 User access management

Description

A formal user registration and de-registration process shall be implemented to enable assignment of access rights.

Similar

  • Internal
    • ID: dec-c-99ad3537

Similar Sections (Give Policies To)

SectionSub SectionsInternal RulesPoliciesFlags
💼 NIST CSF v1.1 → 💼 PR.AC-1: Identities and credentials are issued, managed, verified, revoked, and audited for authorized devices, users and processes1930
💼 NIST CSF v1.1 → 💼 PR.AC-6: Identities are proofed and bound to credentials and asserted in interactions413
💼 NIST CSF v1.1 → 💼 PR.AC-7: Users, devices, and other assets are authenticated (e.g., single-factor, multi-factor) commensurate with the risk of the transaction (e.g., individuals' security and privacy risks and other organizational risks)1923

Sub Sections

SectionSub SectionsInternal RulesPoliciesFlags

Policies (1)

PolicyLogic CountFlags
📝 Consumer Google Accounts are used 🟢🟢 x3

Internal Rules

RulePoliciesFlags
✉️ dec-z-79f4ab881