CFM-10—Time Clock Configuration Access
>Control Description
Access to modify time data is restricted to authorized personnel.
Theme
Technology
Type
Preventive
Policy/Standard
Infrastructure Management Policy>Implementation Guidance
1. Ensure that the ability to modify time data is restricted to authorized personnel. 2. Ensure that access reviews of authorized users and all remediations are appropriately tracked
>Testing Procedure
1. Obtain a list of all users who have the ability to modify time data. 2. Validate whether access reviews of these users were performed and all remediations are appropriately tracked
>Audit Artifacts
E-CFM-16
E-CFM-17
>Framework Mappings
Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.
Ask AI
Configure your API key to use AI features.