Expert Advice Community

Guest

Template content - Access control policy

  Quote
Guest
Guest user Created:   Oct 25, 2019 Last commented:   Oct 25, 2019

Template content - Access control policy

Hello, where is my question inside the Access Control Policy: chapter 3.4 Management of special rights Question: The business and security requirements for access are defined in the „Directory for Risk Assessment“(?) I don’t understand this. Can you explain that connection to me, please?
0 0

Assign topic to the user

ISO 22301 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

ISO 22301 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Rhand Leal Oct 25, 2019

Please note that the original English text is "When allocating privileges the person responsible must take into account business and security requirements for access (defined in risk assessment), ..."

Considering this text, business and security requirements for access are not defined in the risk assessment. The risk assessment only provides additional information that must be considered when defining such accesses. An example of business requirement for access is remote access to some roles (e.g., sales staff, remote developers, etc.)

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Oct 24, 2019

Oct 24, 2019

Suggested Topics