💼 CC6.1-4 Identifies and Authenticates Users

• Contextual name: 💼 CC6.1-4 Identifies and Authenticates Users
• ID: /frameworks/soc-2/cc6/01/04
• Located in: 💼 CC6.1 The entity implements logical access security software, infrastructure, and architectures over protected information assets to protect them from security events to meet the entity's objectives.

Description

Persons, infrastructure and software are identified and authenticated prior to accessing information assets, whether locally or remotely.

Similar

• Internal
  • ID: dec-c-1e070472

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags

Policies (4)

Policy	Logic Count	Flags
📝 AWS IAM Policy allows full administrative privileges 🟢	1	🟢 x6
📝 AWS IAM User has inline or directly attached policies 🟢	1	🟠 x1, 🟢 x5
📝 Azure App Service is not registered with Microsoft Entra ID 🟢	1	🟢 x6
📝 Consumer Google Accounts are used 🟢		🟢 x3

Internal Rules

Rule	Policies	Flags
✉️ dec-x-1fc681bc	1
✉️ dec-x-157aa4b9	1
✉️ dec-x-4157c58a	1
✉️ dec-z-79f4ab88	1