💼 A.9.4.1 Information access restriction

• Contextual name: 💼 A.9.4.1 Information access restriction
• ID: /frameworks/iso-iec-27001-2013/09/04/01
• Located in: 💼 A.9.4 System and application access control

Description

Access to information and application system functions shall be restricted in accordance with the access control policy.

Similar

• Internal
  • ID: dec-c-cd9e50e8

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 NIST CSF v1.1 → 💼 PR.AC-4: Access permissions and authorizations are managed, incorporating the principles of least privilege and separation of duties		17	52
💼 NIST CSF v1.1 → 💼 PR.DS-5: Protections against data leaks are implemented		47	66

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags

Policies (20)

Policy	Logic Count	Flags
📝 AWS DMS Replication Instance is publicly accessible 🟢	1	🟢 x6
📝 AWS EC2 Security Group allows unrestricted CIFS traffic 🟢	1	🟢 x6
📝 AWS EC2 Security Group allows unrestricted traffic to MongoDB 🟢	1	🟢 x6
📝 AWS EC2 Security Group allows unrestricted traffic to MSSQL 🟢	1	🟢 x6
📝 AWS EC2 Security Group allows unrestricted traffic to MySQL 🟢	1	🟢 x6
📝 AWS EC2 Security Group allows unrestricted traffic to Oracle DBMS 🟢	1	🟢 x6
📝 AWS EC2 Security Group allows unrestricted traffic to PostgreSQL 🟢	1	🟢 x6
📝 AWS IAM Policy allows full administrative privileges 🟢	1	🟢 x6
📝 AWS RDS Instance is publicly accessible and in an unrestricted public subnet 🟢	1	🟢 x6
📝 AWS RDS Snapshot is publicly accessible 🟢	1	🟢 x6
📝 AWS S3 Bucket is not configured to block public access 🟢	1	🟢 x6
📝 Azure Cosmos DB Account Private Endpoints are not used 🟢	1	🟢 x6
📝 Azure Cosmos DB Account Virtual Network Filter is not enabled 🟢	1	🟢 x6
📝 Azure Cosmos DB Entra ID Client Authentication is not used 🟢		🟢 x3
📝 Azure Network Security Group allows public access to HTTP(S) ports 🟢	1	🟢 x6
📝 Azure Network Security Group allows public access to RDP port 🟢	1	🟢 x6
📝 Azure Network Security Group allows public access to SSH port 🟢	1	🟢 x6
📝 Azure PostgreSQL Flexible Server Firewall Rules allow access to Azure services 🟢	1	🟢 x6
📝 Azure SQL Database allows ingress from 0.0.0.0/0 (ANY IP) 🟢	1	🟢 x6
📝 Azure Storage Account Allow Blob Anonymous Access is enabled 🟢	1	🟢 x6

Internal Rules

Rule	Policies	Flags
✉️ dec-x-3e379c67	1
✉️ dec-x-4c15a09f	1
✉️ dec-x-14bf01f3	1
✉️ dec-x-46a83a30	1
✉️ dec-x-157aa4b9	1
✉️ dec-x-0289e9c9	1
✉️ dec-x-599c86b4	1
✉️ dec-x-083928f5	1
✉️ dec-x-63737248	1
✉️ dec-x-b4d3d9dc	2
✉️ dec-x-b3342905	1
✉️ dec-x-bf1f13f6	1
✉️ dec-x-ca1c0c0d	1
✉️ dec-x-e02b5fdd	1
✉️ dec-x-ec547a7c	1
✉️ dec-x-f4cc003a	1
✉️ dec-x-f12d78aa	1
✉️ dec-x-f937c35f	1
✉️ dec-z-c82c9f97	1