C3 (3 points)
https://knobit.org/id/task/dsec-log-integrity-recertification/C3
Also as Turtle · JSON-LD · RDF/XML
| dcterms:license | https://creativecommons.org/licenses/by/4.0/ |
|---|---|
| owl:sameAs | https://bitbucket.org/reffa/ontology/id/task/dsec-log-integrity-recertification/C3 |
| rdfs:label | C3 (3 points) en |
| schema:hasPart | dsec-log-integrity-recertification C3: break-glass role in no recertification campaign |
| schema:hasPart | dsec-log-integrity-recertification C3: service account reading restricted data in no campaign |
| schema:hasPart | dsec-log-integrity-recertification C3: uncovered roles put into a campaign with an independent reviewer |
| schema:identifier | C3 |
| schema:position | 3 |
| schema:text | Privileged and restricted access outside recertification, 1 each. (a) DWH_BREAKGLASS (emergency full administration, 3 holders) is in no campaign. (b) SVC_CRM_SYNC (service account reading customer.personal_code) is in no campaign. (c) Each is put into a campaign with a frequency and a reviewer who does not hold it (break-glass in RC-102 under the CIO, or its own campaign; the service account reviewed by its owner, the CRM product owner, or the data owner). en |