Australian Energy Sector Cyber Security Framework (AESCSF)
Identity and access management (ACCESS) – Australian Energy Sector Cyber Security Framework (AESCSF)

Australian Energy Sector Cyber Security Framework (AESCSF) ACCESS-AP1: Anti-pattern: access provisioned before need is confirmed

What does ACCESS-AP1 require?

This anti-pattern is present when identities are created and access to assets is granted before it has been confirmed that the user genuinely needs that access; to attain the level it must be absent, with identities created only for a business need and access granted only after the required level is established.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Identity and access management (ACCESS) – Australian Energy Sector Cyber Security Framework (AESCSF)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Australian Energy Sector Cyber Security Framework (AESCSF) controls