User Access Control Objective Ensure user accounts: Are assigned to authorised individuals only Provide access to only those applications, computers and networks actually required for the user to perform their role Clause Requirements Evidence/Narrative 5.1 It is a requirement that you have identified all locations where sensitive and businesses critical information is stored digitally. (email, web and application servers, data shares, end user devices etc) Has this been done? For the locations identified above answer the following questions 5.2 Does the organisation have a user Answer not required account creation and approval process? 5.3 Does the organisation authenticate Answer not required users before granting access in compliance with the defined password policy?
User Access Control Objective Ensure user accounts: Are assigned to authorised individuals only Provide access to only those applications, computers and networks actually required for the user to perform their role Clause Requirements Evidence/Narrative 5.1 It is a requirement that you have identified all locations where sensitive and businesses critical information is stored digitally. (email, web and application servers, data shares, end user devices etc) Has this been done? For the locations identified above answer the following questions 5.2 Does the organisation have a user account creation and approval process? Answer not required 5.3 Does the organisation authenticate users before granting access in compliance with the defined password policy? Answer not required
Training-2000-CE-Questionnaire-A-Sole-Trader.docx