Guest
Access control
What is the best way to set up within our organization the team that do the acces control task, in order to have a correct segregation of responsabilities.
Assign topic to the user
ISO 27001 ACCESS CONTROL POLICY
Define the rules for access to various systems.
Get it now 
ISO 27001 ACCESS CONTROL POLICY
Define the rules for access to various systems.
Get it now
ISO 27001 ACCESS CONTROL POLICY
Define the rules for access to various systems.
Get it now
Guest
Guest post
Jan 12, 2016
Answer: The system owner, be it business or IT, has to define the access rights fo users and approve how this will be implemented. There is however no team needed for this task.
The person defining and assigning the access rights should make sure segregation of duties is achieved between 1) the person(s) who performs the activity and 2) the person who verifies if the rules were complied with.
Comment as guest or Sign in
Jan 12, 2016
Jan 12, 2016
Jan 12, 2016