Skip to main content

Support Portal

Submit a request

DESelect
Security
A9. Access Control

Articles in this section

Is physical and logical user access to audit logs restricted to authorized personnel?
Do you require a periodical authorization and validation (e.g. at least annually) of the entitlements for all system users and administrators (exclusive of users maintained by your tenants), based on the rule of least privilege?
Are controls in place to prevent unauthorized access to tenant application, program, or object source code, and assure it is restricted to authorized personnel only?
Do you have controls in place ensuring timely removal of systems access that is no longer required for business purposes?
Do you have a written policy for user changes (joiners, movers, leavers) to be handled?
Are you disabling access rights immediately after the end of employment?
Do you have a written password management policy?
Do you allow remote access?
Do you use generic accounts to acces the servers and applications for administrator purposes?
Do you allow multiple employees to use the same login?

See more

Are factory default account details been changed?

Jonathan van Driessen

February 03, 2021 12:01

Yes.

Was this article helpful?

0 out of 0 found this helpful

Have more questions? Submit a request

Comments

0 comments

Please sign in to leave a comment.

Copyright © DESelect bv. All rights reserved.

DESelect.com
Trust Status Page
Privacy Policy
Terms of Service