6.1: Establish an Access Granting Process

Control Statement

Establish and follow a process, preferably automated, for granting access to enterprise assets upon new hire, rights grant, or role change of a user.

[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]