Access control
A.5.15
-
Last updated
Applicable
Catalog reference
Define and enforce rules that govern who gets access to which information and other assets, based on business and security requirements.
Narrative — how we satisfy this requirement
Access follows least privilege through role-based groups in the identity provider, and each system owner reviews the groups every quarter.
Code
Title
No KPIs linked yet.