💼 CC6.1-9 Manages Credentials for Infrastructure and Software

• Contextual name: 💼 CC6.1-9 Manages Credentials for Infrastructure and Software
• ID: /frameworks/soc-2/cc6/01/09
• Located in: 💼 CC6.1 The entity implements logical access security software, infrastructure, and architectures over protected information assets to protect them from security events to meet the entity's objectives.

Description

New internal and external infrastructure and software are registered, authorized, and documented prior to being granted access credentials and implemented on the network or access point. Credentials are removed and access is disabled when access is no longer required or the infrastructure and software are no longer in use.

Similar

• Internal
  • ID: dec-c-b1b05177

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags

Policies (3)

Policy	Logic Count	Flags
📝 AWS IAM Server Certificate is expired 🟢	1	🟢 x6
📝 Azure SQL Server Transparent Data Encryption Protector is not encrypted with Customer-managed key 🟢	1	🟢 x6
📝 Consumer Google Accounts are used 🟢		🟢 x3

Internal Rules

Rule	Policies	Flags
✉️ dec-x-12a85339	1
✉️ dec-x-230b5e35	1
✉️ dec-z-79f4ab88	1