ISO/IEC 27017:2026
Technological controls, cloud service specific guidance – ISO/IEC 27017:2026

ISO/IEC 27017:2026 8.2: Privileged access rights

What does 8.2 require?

Carried first-edition guidance. Matching the identified risks, the CSC authenticates its cloud service administrators to the service's administrative functions with sufficiently strong techniques such as multi-factor authentication, and the CSP offers those techniques, for example its own multi-factor authentication or support for a third-party mechanism.

Maintained by Gerard Blokdyk

Other controls in Technological controls, cloud service specific guidance – ISO/IEC 27017:2026

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.