Skip to main content

💼 5.15 Access control

  • Contextual name: 💼 5.15 Access control
  • ID: /frameworks/iso-iec-27001-2022/05/15
  • Located in: 💼 5 Organizational controls

Description​

Rules to control physical and logical access to information and other associated assets shall be established and implemented based on business and information security requirements.

Similar​

  • Internal
    • ID: dec-c-a1437be0

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags

Policies (16)​

PolicyLogic CountFlags
📝 AWS Account Root User credentials were used is the last 30 days 🔴🟢1🔴 x1, 🟢 x6
📝 AWS Account Root User has active access keys 🟢1🟢 x6
📝 AWS EC2 Instance IAM role is not attached 🟢1🟢 x6
📝 AWS IAM User has inline or directly attached policies 🟢1🟠 x1, 🟢 x5
📝 AWS IAM User MFA is not enabled for all users with console password 🟢1🟢 x6
📝 AWS IAM User with console and programmatic access set during the initial creation 🟢🟢 x3
📝 AWS RDS Instance is publicly accessible and in an unrestricted public subnet 🟢1🟢 x6
📝 AWS S3 Bucket is not configured to block public access 🟢1🟢 x6
📝 AWS S3 Bucket MFA Delete is not enabled 🟠🟢1🟠 x1, 🟢 x6
📝 Azure App Service Authentication is disabled and Basic Authentication is enabled 🟢1🟢 x6
📝 Azure App Service Basic Authentication is enabled 🟢🟢 x3
📝 Azure App Service is not registered with Microsoft Entra ID 🟢1🟢 x6
📝 Azure SQL Database allows ingress from 0.0.0.0/0 (ANY IP) 🟢1🟢 x6
📝 Azure SQL Database Transparent Data Encryption is not enabled 🟢1🟢 x6
📝 Azure SQL Server Microsoft Entra authentication is not configured 🟢1🟢 x6
📝 Azure Storage Account Trusted Azure Services are not enabled as networking exceptions 🟢1🟢 x6

Internal Rules​

RulePoliciesFlags
✉️ dec-x-0a7801fb1
✉️ dec-x-1fc681bc1
✉️ dec-x-2fcb6d852
✉️ dec-x-6c93750d1
✉️ dec-x-0289e9c91
✉️ dec-x-3179d53c1
✉️ dec-x-4157c58a1
✉️ dec-x-b10e98af1
✉️ dec-x-b92b08f41
✉️ dec-x-ca52f63a2
✉️ dec-x-e58fd8e01
✉️ dec-x-ec547a7c1
✉️ dec-x-f937c35f1
✉️ dec-z-bb7312921