AIS-02: Customer Access Requirements

Control Statement

Prior to granting customers access to data, assets, and information systems, identified security, contractual, and regulatory requirements for customer access shall be addressed.