Narrative
Access follows least privilege through role-based groups in the identity provider, and each system owner reviews the groups every quarter.
Current
This version cannot be attributed to anyone.
- Applicable
- true
- Exclusion justification
- no value
- Framework id
- iso-27001-2022
- Owner
- PER-001 — Sam de Vries
- Requirement code
- A.5.15
- Status
- Operating