Access control policy: A.9.2.3
Assign topic to the user
ISO 27001 ACCESS CONTROL POLICY
Define the rules for access to various systems.
Get it now 
ISO 27001 ACCESS CONTROL POLICY
Define the rules for access to various systems.
Get it now
ISO 27001 ACCESS CONTROL POLICY
Define the rules for access to various systems.
Get it now
Dear consultants,
Is there any info to answer this topic?
Thanks in advance,
Tom
The control A.9.2.3 (Management of privileged access rights) is covered in sections 3.4 (Privilege management) and 3.5 (Regular review of access rights).
This article will provide you further explanation about access control:
- How to handle access control according to ISO 27001 https://advisera.com/27001academy/blog/2015/07/27/how-to-handle-access-control-according-to-iso-27001/
This material will also help you regarding access control:
- ISO 27001 Annex A Controls in Plain English https://advisera.com/books/iso-27001-annex-controls-plain-english/
Comment as guest or Sign in
Jan 16, 2018