IDM-03—Locking and withdrawal of user accounts in the event of inactivity or multiple failed logins
>Control Description
User accounts of internal and external employees of the Cloud Service Provider as well as for system components involved in automated authorisation processes of the Cloud Service Provider are automatically locked if they have not been used for a period of two months. Approval from authorised personnel or system components are required to unlock these accounts.
Locked user accounts are automatically revoked after six months. After revocation, the procedure for granting user accounts and access rights (cf. IDM-02) must be repeated.
Additional criteria: -
Ask AI
Configure your API key to use AI features.