💼 CC6.1-8 Manages Identification and Authentication

• Contextual name: 💼 CC6.1-8 Manages Identification and Authentication
• ID: /frameworks/soc-2/cc6/01/08
• Located in: 💼 CC6.1 The entity implements logical access security software, infrastructure, and architectures over protected information assets to protect them from security events to meet the entity's objectives.

Description

Identification and authentication requirements are established, documented, and managed for individuals and systems accessing entity information, infrastructure and software.

Similar

• Internal
  • ID: dec-c-a6bb4b85

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags

Policies (21)

Policy	Logic Count	Flags
📝 AWS Account IAM Access Analyzer is not enabled for all regions 🟢	1	🟢 x6
📝 AWS Account IAM Password Policy Number of passwords to remember is not set to 24 🟢	1	🟢 x6
📝 AWS Account Root User credentials were used is the last 30 days 🔴🟢	1	🔴 x1, 🟢 x6
📝 AWS CloudTrail S3 Bucket Access Logging is not enabled. 🟢	1	🟢 x6
📝 AWS IAM Policy allows full administrative privileges 🟢	1	🟢 x6
📝 AWS IAM User Access Keys are not rotated every 90 days or less 🟢	1	🟢 x6
📝 AWS IAM User has more than one active access key 🟢	1	🟢 x6
📝 AWS IAM User with console and programmatic access set during the initial creation 🟢		🟢 x3
📝 AWS S3 Bucket MFA Delete is not enabled 🟠🟢	1	🟠 x1, 🟢 x6
📝 AWS S3 Bucket Policy is not set to deny HTTP requests 🟢	1	🟢 x6
📝 AWS S3 Bucket Server Access Logging is not enabled 🟢	1	🟢 x6
📝 AWS S3 Bucket Versioning is not enabled 🟢	1	🟢 x6
📝 Azure App Service Authentication is disabled and Basic Authentication is enabled 🟢	1	🟢 x6
📝 Azure App Service Basic Authentication is enabled 🟢		🟢 x3
📝 Azure App Service is not registered with Microsoft Entra ID 🟢	1	🟢 x6
📝 Azure Cosmos DB Account Private Endpoints are not used 🟢	1	🟢 x6
📝 Azure Cosmos DB Entra ID Client Authentication is not used 🟢		🟢 x3
📝 Azure PostgreSQL Flexible Server Firewall Rules allow access to Azure services 🟢	1	🟢 x6
📝 Azure SQL Database allows ingress from 0.0.0.0/0 (ANY IP) 🟢	1	🟢 x6
📝 Azure Storage Account Trusted Azure Services are not enabled as networking exceptions 🟢	1	🟢 x6
📝 Azure Storage Blob Containers Soft Delete is not enabled 🟢	1	🟢 x6

Internal Rules

Rule	Policies	Flags
✉️ dec-x-1fc681bc	1
✉️ dec-x-2a9e5255	1
✉️ dec-x-157aa4b9	1
✉️ dec-x-0289e9c9	1
✉️ dec-x-3179d53c	1
✉️ dec-x-30795016	1
✉️ dec-x-a8281d05	1
✉️ dec-x-ab7fc52e	1
✉️ dec-x-b4d3d9dc	2
✉️ dec-x-b10e98af	1
✉️ dec-x-bcb0c78f	1
✉️ dec-x-bf1f13f6	1
✉️ dec-x-ca52f63a	2
✉️ dec-x-d5fbfc40	1
✉️ dec-x-e58fd8e0	1
✉️ dec-x-e0014333	2
✉️ dec-x-f7c2faac	1
✉️ dec-z-bb731292	1