hrs-021-userswithelevatedprivileges.md

SCF - HRS-02.1 - Users With Elevated Privileges

Mechanisms exist to ensure that every user accessing a system that processes, stores, or transmits sensitive information is cleared and regularly trained to handle the information in question.

Mapped framework controls

SOC 2

• CC1.4

Control questions

Does the organization ensure that every user accessing a system that processes, stores, or transmits sensitive information is cleared and regularly trained to handle the information in question?