Bank of Mauritius Guideline on Use of Cloud Services (2022) 7.2.vi: Keep an inventory of IT assets on the cloud and apply proportionate identity, access and network controls

What does 7.2.vi require?

The institution keeps an inventory process that tracks and manages every IT asset hosted on the cloud, and runs identity and access management, access logging and network controls proportionate to the materiality of the assets and the risks, which may include limiting account privileges, multifactor authentication or dual control, frequent updating and review of access lists, and tools that detect unauthorised access to material IT assets.