Australian Information Security Manual ISM-1268: The need-to-know principle is enforced for database contents through the application of mi

The need-to-know principle is enforced for database contents through the application of minimum privileges, database views, database roles and data tokenisation.

Other controls in Guidelines for database systems

ISM-0393 Databases and their contents are classified based on the sensitivity or classification of
ISM-1243 A database register is developed, implemented, maintained and verified on a regular basis.
ISM-1255 Database users' ability to access, insert, modify and remove database contents is restrict
ISM-1256 File-based access controls are applied to database files.
ISM-1269 Database servers and web servers are functionally separated.
ISM-1270 Database servers are placed on a different network segment to user workstations.
ISM-1271 Network access controls are implemented to restrict database server communications to stri
ISM-1272 If only local access to a database is required, networking functionality of database manag

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls