6.8—6.8
>Control Description
Define and maintain role-based access control, through determining and documenting the access rights necessary for each role within the enterprise to successfully carry out its assigned duties. Perform access control reviews of enterprise assets to validate that all privileges are authorized, on a recurring schedule at a minimum annually, or more frequently.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.