IAM-03—Logical Access De-provisioning
>Control Description
Theme
Type
Policy/Standard
Access Management Procedure>Implementation Guidance
1. Design and document a process for Logical Access and requirements for access de-provisioning. 2. Ensure access termination logic is mandated in the access management portal accordingly.
>Testing Procedure
1. Inspect Organization's Logical Access Account Standard to determine whether the requirements for access de-provisioning or terminations were defined. 2. Inspect the list of system generated population of terminated full-time and temporary employees and contractors from the HR system. 3. Inspect configurations to determine that user accounts are disabled after they are no longer required.. 4. Inspect removals from the access management tool for a selection of terminations.
>Audit Artifacts
>Framework Mappings
Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.
Ask AI
Configure your API key to use AI features.