Australian Information Security Manual

Guidelines for database systems

Australian Information Security Manual ISM-1255: Database users' ability to access, insert, modify and remove database contents is restrict

Database users' ability to access, insert, modify and remove database contents is restricted based on their work duties.

Other controls in Guidelines for database systems

ISM-0393 Databases and their contents are classified based on the sensitivity or classification of
ISM-1243 A database register is developed, implemented, maintained and verified on a regular basis.
ISM-1256 File-based access controls are applied to database files.
ISM-1268 The need-to-know principle is enforced for database contents through the application of mi
ISM-1269 Database servers and web servers are functionally separated.
ISM-1270 Database servers are placed on a different network segment to user workstations.
ISM-1271 Network access controls are implemented to restrict database server communications to stri
ISM-1272 If only local access to a database is required, networking functionality of database manag

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls