IAM-05—Logical Access Review
>Control Description
Theme
Type
Policy/Standard
Access Management Procedure>Implementation Guidance
1. Design and document a process for Logical Access and requirements for access reviews. 2. Ensure access reviews are performed as per defined frequency. 3. Ensure that the necessary corrective action has been taken, if required.
>Testing Procedure
1. Inspect Organization's Logical Access Account Standard to determine whether the requirements for access reviews were defined. 2. Inspect the access reviews reconciliation report on a quarterly basis. 3. For a sample of services, inspect the access review for the selected quarters. 4. In case of any discrepancy, ensure that corrective action has been taken and appropriate approval is obtained from the authorized personnel.
>Audit Artifacts
>Framework Mappings
Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.
Ask AI
Configure your API key to use AI features.