Information access restriction
A.8.3
-
Last updated
Applicable
Catalog reference
Restrict access to information and other assets in line with the access control policy, so people can only reach what they need for their role.
Narrative — how we satisfy this requirement
An engineer reaches only the customer systems assigned to them, through groups in the identity provider.
None due within 31 days.