SIG (Shared Assessments)
SIG: Operations, Access and Endpoint

SIG (Shared Assessments) SIG-H-01: Access Control

Implement formal access provisioning, periodic recertification, least privilege, separation of duties, and privileged access management across systems hosting in scope data.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in SIG: Operations, Access and Endpoint

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.