Logo

CISOBot - Your AI CISO Assistant

IAC-07

User Provisioning & De-Provisioning

Weight: 10/10
Description

Mechanisms exist to utilize a formal user registration and de-registration process that governs the assignment of access rights.

Control Question

Does the organization utilize a formal user registration and de-registration process that governs the assignment of access rights?

Control Metadata
Domain:

Identification & Authentication

Validation Cadence:

Annual

Evidence Request List:

E-HRS-12 E-HRS-18 E-HRS-19

Have questions about this control?

Ask CISOBot for implementation guidance and best practices