I3 (2 points)
https://knobit.org/id/task/dsec-log-integrity-recertification/I3
Also as Turtle · JSON-LD · RDF/XML
| dcterms:license | https://creativecommons.org/licenses/by/4.0/ |
|---|---|
| owl:sameAs | https://bitbucket.org/reffa/ontology/id/task/dsec-log-integrity-recertification/I3 |
| rdfs:label | I3 (2 points) en |
| schema:hasPart | dsec-log-integrity-recertification I3: recertification is periodic, on a stated frequency, run on time |
| schema:hasPart | dsec-log-integrity-recertification I3: recertified by someone who does not hold the access |
| schema:hasPart | dsec-log-integrity-recertification I3: unconfirmed or rejected access revoked with evidence |
| schema:hasPart | dsec-log-integrity-recertification I3: every privileged and restricted-data role in scope, service and emergency accounts included |
| schema:identifier | I3 |
| schema:position | 6 |
| schema:text | Part B explains access recertification, 0.5 each. (a) A periodic review of who holds access, on a stated frequency, run on time. (b) By someone who does not hold the access (the role owner or the holder's manager), never the holder. (c) Access not confirmed or rejected is revoked, with evidence. (d) It covers every role with privileges or restricted-data access, service and emergency accounts included. en |