IAM-02—Change of Access Notification
>Control Description
Changes made to system access trigger a notification that is sent to designated personnel.
Theme
Technology
Type
Detective
Policy/Standard
Access Management Procedure>Implementation Guidance
1. Design and document a process for Logical Access and requirements for access modification. 2. Ensure that any change made to access triggers a notification in the access management portal accordingly.
>Testing Procedure
1. Inspect Organization Logical Access Policy and/or Standard to determine the requirements for access provisioning were defined. 2. Validate for a sample access change, that a notification in the access management portal was triggered to the management.
>Audit Artifacts
E-IAM-01
E-IAM-04
E-IAM-05
>Framework Mappings
Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.
Ask AI
Configure your API key to use AI features.