Under active development Content is continuously updated and improved

11.5.311.5.3

>Control Description

The relevant entities shall only permit identities assigned to multiple persons, such as shared identities, where they are necessary for business or operational reasons and are subject to an explicit approval process and documentation. The relevant entities shall take identities assigned to multiple persons into account in the cybersecurity risk management framework referred to in point 2.1.

Ask AI

Configure your API key to use AI features.