FFIEC IT Examination Handbook
Information Security booklet (September 2016) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook IS-II.C.7(b): II.C.7(b) User Access Program (Information Security)

What does IS-II.C.7(b) require?

Management runs a user access program for physical and logical access built on least privilege, alignment of job descriptions with access, definition of user profiles by business and application owners, ongoing owner reviews of access with timely change reporting to security administration, timely notice from human resources of job changes and terminations, and periodic independent reviews of access administration.

Maintained by Gerard BlokdykControl text last updated

Other controls in Information Security booklet (September 2016) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll FFIEC IT Examination Handbook controls