Under active development Content is continuously updated and improved · Last updated Feb 18, 2026, 2:55 AM UTC

2200.02200.0

>Control Description

The Supplier shall understand, document and manage (i.e create, review and disable) access to networks, information systems, and removable storage media & devices supporting Functions and protection of Data. All accounts and identities, including users, system and automated functions that can access Data or systems are appropriately verified, authenticated and authorised.

>Cross-Framework Mappings

Ask AI

Configure your API key to use AI features.