Skip to main content

💼 A.9.2.1 User registration and de-registration

  • ID: /frameworks/iso-iec-27001-2013/09/02/01

Stats​

not available

Description​

A formal user registration and de-registration process shall be implemented to enable assignment of access rights.

Similar​

  • Internal
    • ID: dec-c-99ad3537

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 NIST CSF v1.1 → 💼 PR.AC-1: Identities and credentials are issued, managed, verified, revoked, and audited for authorized devices, users and processes2237no data
💼 NIST CSF v1.1 → 💼 PR.AC-6: Identities are proofed and bound to credentials and asserted in interactions413no data
💼 NIST CSF v1.1 → 💼 PR.AC-7: Users, devices, and other assets are authenticated (e.g., single-factor, multi-factor) commensurate with the risk of the transaction (e.g., individuals' security and privacy risks and other organizational risks)2428no data

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance

Policies (1)​

PolicyLogic CountFlagsCompliance
🛡️ Consumer Google Accounts are used🟢⚪🟢 x2, ⚪ x1no data

Internal Rules​

RulePoliciesFlags
✉️ dec-z-79f4ab881