IAM-06: User Access Provisioning
Control Family:
Threats Addressed:
Previous Version:
- Cloud Controls Matrix v3.0.1:
- IAM-09: User Access Authorization
Control Statement
Define and implement a user access provisioning process which authorizes, records, and communicates access changes to data and assets.
Implementation Guidance
The organizations should address any changes to the identity and access controls using the pre-established baseline. These changes could be from the proactive management of exploits via vulnerability scanning or reactive management of issues via incident management.
Auditing Guidance
- Determine if personnel required to approve system access requests are identified and documented.
- Evaluate if access requests are documented and approved by required personnel prior to access provisioning.
[csf.tools Note: For more information on the Cloud Controls Matrix, visit the CSA Cloud Controls Matrix Homepage.]
Cloud Control Matrix is Copyright 2023 Cloud Security Alliance.