BSI IT-Grundschutz
BSI IT-Grundschutz: Access Control & Identity

BSI IT-Grundschutz BSI-01: Account management and provisioning

Account management and provisioning. Control from BSI IT-Grundschutz framework, domain: BSI IT-Grundschutz: Access Control & Identity.

What else in your programme already covers this

This control maps to 48 controls across 39 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

NIST Privacy Framework · 2 controls

  • NISTPF-5 Protect-P Access Control (PR.AC-P)
  • NISTPF-8 Protect-P Information Protection Processes (PR.PO-P)

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) · 1 control

FISMA · 1 control

Ghana Cybersecurity Act · 1 control

ISMAP (Japan) · 1 control

ISO 27017 · 1 control

ISO 27018 · 1 control

ISO 27043 · 1 control

ISO/IEC 27010:2015 · 1 control

ISO/SAE 21434 · 1 control

MITRE ATT&CK · 1 control

MITRE D3FEND · 1 control

MTCS (Singapore) · 1 control

NIS2 Directive Implementing Acts · 1 control

  • NIS2I-6 Access Control, Asset Management, and Physical Security

NIST SP 800-115 (Technical Guide to Information Security Testing and Assessment) · 1 control

  • NISTSP115-8 Operational Considerations - Tools, Reporting Templates, ISMS Integration, Annex Material

NIST SP 800-123 · 1 control

  • NISTSP123-3 Authentication, Access Control, and Account Management

NIST SP 800-124 Revision 2 - Guidelines for Managing the Security of Mobile Devices · 1 control

NIST SP 800-137 · 1 control

  • NISTSP137-6 Malware, Identity Access, and Network Boundary Monitoring

NIST SP 800-144 · 1 control

  • NISTSP144-1 Cloud Governance, Risk Assessment, and Provider Trust Evaluation

NIST SP 800-145 · 1 control

  • NISTSP145-8 Governance, Reporting, and Stakeholder Education on Cloud Definition

NIST SP 800-146 · 1 control

NIST SP 800-190 · 1 control

NIST SP 800-53 Rev 5 · 1 control

  • NIST800-SC-22 Architecture and provisioning for name/address resolution service

NIST SP 800-61 · 1 control

NIST SP 800-63-4 · 1 control

  • NISTSP63R4-4 Authenticator Lifecycle: Binding, Recovery, Replacement, Suspension, Revocation

NIST SP 800-88 · 1 control

  • NISTSP88-1 Media Sanitization Policy, Roles, and Decision Framework

NIST SP 800-92 · 1 control

  • NISTSP92-4 Log Management: Time Synchronisation, Parsing, Storage, Integrity, Access Control

O-RAN WG11 Security Specification · 1 control

  • ORANWG11-3 Cryptography, TLS, SSH, IPsec, and PKI Lifecycle Management

OWASP MASVS · 1 control

OWASP SAMM · 1 control

  • OWASPSAMM-2 Design: Threat Assessment, Security Requirements, Security Architecture

OWASP Top 10 for LLM Applications 2025 · 1 control

  • OWASPLLM-6 Excessive Agency and Unbounded Consumption (LLM06 + LLM10)

Oman National Cybersecurity Framework · 1 control

  • OMANCS-3 Identity and Access Management, Authentication, Privileged Access

OpenSSF Scorecard · 1 control

  • OSSFSC-3 Build, CI/CD Security, Workflow Permissions, Dangerous Patterns

PTES · 1 control

SIG (Shared Assessments) · 1 control

SLSA · 1 control

  • SUPCHAIN-1 Build Integrity - Source, Build, Provenance

Sigstore - Software Artifact Signing and Verification · 1 control

  • SIGSTORE-2 Transparency Log (Rekor) and Verification

South Korea ISMS-P · 1 control

TISAX - Trusted Information Security Assessment Exchange · 1 control

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in BSI IT-Grundschutz: Access Control & Identity

Query this from an agent

The graph holds this control, the 48 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll BSI IT-Grundschutz controls