5.18
Access Rights
Provision, review, modify, and remove access rights to the information and other related assets according to organization’s access control policy and rules.
-
5.8.3.1 The organization shall provision accounts with the minimum functionality necessary for tasks and shall restrict administrator privileges to an as-required basis.
5.8.3.2 The organization shall remove accounts and/or functionality when users no longer require these for their tasks.
-
-