iac-01-identity&accessmanagementiam.md

SCF - IAC-01 - Identity & Access Management (IAM)

Mechanisms exist to facilitate the implementation of identification and access management controls.

Mapped framework controls

GDPR

• Art 32.1
• Art 32.2

ISO 27002

• A.5.15
• A.5.18

NIST 800-53

• AC-1
• IA-1

SOC 2

• CC6.1

Control questions

Does the organization facilitate the implementation of identification and access management controls?