💼 CC6.3-1 Creates or Modifies Access to Protected Information Assets

• Contextual name: 💼 CC6.3-1 Creates or Modifies Access to Protected Information Assets
• ID: /frameworks/soc-2/cc6/03/01
• Located in: 💼 CC6.3 The entity authorizes, modifies, or removes access to data, software, functions, and other protected information assets based on roles, responsibilities, or the system design and changes, giving consideration to the concepts of least privilege and segregation of duties, to meet the entity's objectives.

Description

Processes are in place to create or modify access to protected information assets based on authorization from the asset's owner.

Similar

• Internal
  • ID: dec-c-66f69068

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags