Skip to main content

💼 5.10 Acceptable use of information and other associated assets

  • Contextual name: 💼 5.10 Acceptable use of information and other associated assets
  • ID: /frameworks/iso-iec-27001-2022/05/10
  • Located in: 💼 5 Organizational controls

Description​

Rules for the acceptable use and procedures for handling information and other associated assets shall be identified, documented and implemented.

Similar​

  • Internal
    • ID: dec-c-9a621695

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags

Policies (14)​

PolicyLogic CountFlags
📝 AWS Account Root User has active access keys 🟢1🟢 x6
📝 AWS IAM Server Certificate is expired 🟢1🟢 x6
📝 AWS IAM User with console and programmatic access set during the initial creation 🟢🟢 x3
📝 AWS RDS Instance is publicly accessible and in an unrestricted public subnet 🟢1🟢 x6
📝 AWS S3 Bucket is not configured to block public access 🟢1🟢 x6
📝 AWS S3 Bucket MFA Delete is not enabled 🟠🟢1🟠 x1, 🟢 x6
📝 Azure App Service Authentication is disabled and Basic Authentication is enabled 🟢1🟢 x6
📝 Azure App Service Basic Authentication is enabled 🟢🟢 x3
📝 Azure Non-RBAC Key Vault stores Keys without expiration date 🟢1🟢 x6
📝 Azure Non-RBAC Key Vault stores Secrets without expiration date 🟢1🟢 x6
📝 Azure RBAC Key Vault stores Keys without expiration date 🟢1🟢 x6
📝 Azure RBAC Key Vault stores Secrets without expiration date 🟢1🟢 x6
📝 Azure SQL Database allows ingress from 0.0.0.0/0 (ANY IP) 🟢1🟢 x6
📝 Azure Storage Account Trusted Azure Services are not enabled as networking exceptions 🟢1🟢 x6

Internal Rules​

RulePoliciesFlags
✉️ dec-x-0a7801fb1
✉️ dec-x-0feec7902
✉️ dec-x-12a853391
✉️ dec-x-82ca41272
✉️ dec-x-0289e9c91
✉️ dec-x-3179d53c1
✉️ dec-x-b10e98af1
✉️ dec-x-ca52f63a2
✉️ dec-x-ec547a7c1
✉️ dec-x-f937c35f1
✉️ dec-z-bb7312921