services) must be removed or disabled, is this the case? 4.5 In order to prevent untrusted programs running automatically, (including those from the internet) either the auto-run feature must be disabled or user authorisation must be actioned before file execution. Describe how this has been achieved. 4.6 How is internet-based access controlled to any areas containing commercially, personally sensitive data or any data which is critical to the running of the organisation ? Please provide any additional evidence to support your assertions above: User Access Control Objective Ensure user accounts: are assigned to authorised individuals only provide access to only those applications, computers and networks actually required for the user to perform their role Requirements Evidence/Narrative 5.1 It is a requirement that you have identified all locations where sensitive and businesses critical information is stored digitally. (email, web and application servers, data shares, end user devices etc) Has this been done? For the locations identified above answer the following questions 5.2 Does the organisation have a user account creation and approval process?
services) must be removed or disabled, is this the case? 4.5 In order to prevent untrusted programs running automatically, (including those from the internet) either the auto-run feature must be disabled or user authorisation must be actioned before file execution. Describe how this has been achieved. 4.6 How is internet-based access controlled to any areas containing commercially, personally sensitive data or any data which is critical to the running of the organisation ? Please provide any additional evidence to support your assertions above: User Access Control Objective Ensure user accounts: are assigned to authorised individuals only provide access to only those applications, computers and networks actually required for the user to perform their role Requirements Evidence/Narrative 5.1 It is a requirement that you have identified all locations where sensitive and businesses critical information is stored digitally. (email, web and application servers, data shares, end user devices etc) Has this been done? For the locations identified above answer the following questions 5.2 Does the organisation have a user account creation and approval process?
Blackberry-Cyber-Essentials-Questionnaire-v1.050-July-2017-questions.docx