CFG-08
Sensitive / Regulated Data Access Enforcement
Description
Mechanisms exist to configure Technology Assets, Applications and/or Services (TAAS) to restrict access to sensitive/regulated data.
Control Question
Does the organization configure Technology Assets, Applications and/or Services (TAAS) to restrict access to sensitive/regulated data?
Control Metadata
Domain:
Configuration Management
Validation Cadence:
Annual
Evidence Request List:
E-DCH-08