iso 27001 control a9 - access control - by software outsourcing company in india
TRANSCRIPT
ISO 27001 - Control A9 - Access Control
- This will include following A 9 Access control A 9.1 Business requirements of access control A 9.2 User access management
Topics covered
Ecommerce solution providers in Indiahttp://www.ifourtechnolab.com
Objective: To limit access to information and information processing facilities.
Which includes:A 9.1.1: Access control policyA 9.1.2: Access to network and network services
A 9.1 Business requirements of access controls
Ecommerce solution providers in Indiahttp://www.ifourtechnolab.com
A 9.1.1 Access control policy:
Control: An access control policy shall be established, documented and reviewed based on business and information security requirements.
A 9.1.2 Access to network and network services:
Control: Users shall only be provided with access to the network and network services that they have been specifically authorized to use.
A 9.1 continue..
Ecommerce solution providers in Indiahttp://www.ifourtechnolab.com
Objective: To ensure authorized user access and to prevent unauthorized access to systems and services.
Which includes:A 9.2.1 User registration and de-registrationA 9.2.2 User Access ProvisioningA 9.2.3 Management of privileged access rights
A 9.2 User access management
Ecommerce solution providers in Indiahttp://www.ifourtechnolab.com
A 9.2.4 Management of secret authentication information of usersA 9.2.5 Review of user access rightsA 9.2.6 Removal of adjustment of access rights
A 9.2 Continue…
Ecommerce solution providers in Indiahttp://www.ifourtechnolab.com
A 9.2.1 User registration and de-registration
Control: A formal user registration and de-registration process shall be implemented to enable assignment of access rights.
A 9.2.2 User Access Provisioning
Control: A formal user provisioning process shall be implemented to assign or revoke access rights for all user types to all systems and services.
A 9.2 Continue…
Ecommerce solution providers in Indiahttp://www.ifourtechnolab.com
A 9.2.3 Management of privileged access rights
Control: The allocation and use of privileged access rights shall be restricted and controlled through a formal management process.
A 9.2.4 Management of secret authentication information of users
Control: The allocation of secret authentication information shall be controlled through a formal management process.
A 9.2 Continue…
Ecommerce solution providers in Indiahttp://www.ifourtechnolab.com
A 9.2.5 Review of user access rights
Control: Asset owners shall review users’ access rights at a regular intervals.
A 9.2.6 Removal or adjustment of access rights
Control: The access rights of all employees and external party users to information and information processing facilities shall be removed upon termination of their employment, contract or agreement, or adjusted upon change.
A 9.2 Continue…
Ecommerce solution providers in Indiahttp://www.ifourtechnolab.com
http://www.castleforce.co.uk/Compliance/ISO27001/ISO27001A112Useraccessmanagement.aspx
http://www.foxit.com/wp-content/uploads/ITIL-and-ISO27001-v3.pdf
References
Ecommerce solution providers in Indiahttp://www.ifourtechnolab.com
http://www.ifour-consultancy.comhttp://www.ifourtechnolab.com
For more details..
Ecommerce solution providers in Indiahttp://www.ifourtechnolab.com
