Skip to main content

πŸ’Ό A.9.2.1 User registration and de-registration

  • Contextual name: πŸ’Ό A.9.2.1 User registration and de-registration
  • ID: /frameworks/iso-iec-27001-2013/09/02/01
  • Located in: πŸ’Ό A.9.2 User access management

Description​

A formal user registration and de-registration process shall be implemented to enable assignment of access rights.

Similar​

  • Internal
    • ID: dec-c-99ad3537

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό NIST CSF v1.1 β†’ πŸ’Ό PR.AC-1: Identities and credentials are issued, managed, verified, revoked, and audited for authorized devices, users and processes1922
πŸ’Ό NIST CSF v1.1 β†’ πŸ’Ό PR.AC-6: Identities are proofed and bound to credentials and asserted in interactions48
πŸ’Ό NIST CSF v1.1 β†’ πŸ’Ό PR.AC-7: Users, devices, and other assets are authenticated (e.g., single-factor, multi-factor) commensurate with the risk of the transaction (e.g., individuals' security and privacy risks and other organizational risks)1922

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags

Policies (1)​

PolicyLogic CountFlags
πŸ“ Consumer Google Accounts are used 🟒🟒 x3

Internal Rules​

RulePoliciesFlags
βœ‰οΈ dec-z-79f4ab881