💼 CC6.3-2 Removes Access to Protected Information Assets

• Contextual name: 💼 CC6.3-2 Removes Access to Protected Information Assets
• ID: /frameworks/soc-2/cc6/03/02
• Located in: 💼 CC6.3 The entity authorizes, modifies, or removes access to data, software, functions, and other protected information assets based on roles, responsibilities, or the system design and changes, giving consideration to the concepts of least privilege and segregation of duties, to meet the entity's objectives.

Description

Processes are in place to remove access to protected information assets when an individual no longer requires access.

Similar

• Internal
  • ID: dec-c-31c79d5f

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags

Policies (3)

Policy	Logic Count	Flags
📝 Google GCE Instance is configured to use the Default Service Account 🟢	1	🟢 x6
📝 Google GCE Instance is configured to use the Default Service Account with full access to all Cloud APIs 🟢	1	🟢 x6
📝 Google IAM Service Account has admin privileges 🟢	1	🟢 x6