💼 CC6.2-1 Creates Access Credentials to Protected Information Assets

• Contextual name: 💼 CC6.2-1 Creates Access Credentials to Protected Information Assets
• ID: /frameworks/soc-2/cc6/02/01
• Located in: 💼 CC6.2 Prior to issuing system credentials and granting system access, the entity registers and authorizes new internal and external users whose access is administered by the entity.

Description

The entity creates credentials for accessing protected information assets based on an authorization from the system's asset owner or authorized custodian. Authorization is required for the creation of all types of credentials of individuals (for example, employees, contractors, vendors, and business partner personnel), systems, and software.

Similar

• Internal
  • ID: dec-c-cbfde721

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags