💼 CC6.3-4 Reviews Access Roles and Rules

• ID: /frameworks/soc-2/cc6/03/04

Description

The appropriateness of access roles and access rules is reviewed on a periodic basis for unnecessary and inappropriate individuals (for example, employees, contractors, vendors, business partner personnel) and inappropriate system or service accounts. Access roles and rules are modified, as appropriate.

Similar

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance