Australian Energy Sector Cyber Security Framework (AESCSF)
Identity and access management (ACCESS) – Australian Energy Sector Cyber Security Framework (AESCSF)

Australian Energy Sector Cyber Security Framework (AESCSF) ACCESS-AP3: Anti-pattern: deprovisioning ignores risk criteria

What does ACCESS-AP3 require?

This anti-pattern is present when removing user access is not guided by the organisation's risk criteria (RISK-2d, RISK-3b), for example by not removing privileged or critical asset access first; those risk practices must be at least partially implemented for it to be absent.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Identity and access management (ACCESS) – Australian Energy Sector Cyber Security Framework (AESCSF)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Australian Energy Sector Cyber Security Framework (AESCSF) controls