Identity and Access Management (IAM)
Level N/A
Manage, store, and review the information of system identities, and level of access.
Parent
Compliance Framework
CCM v4.0.10
Control Number
IAM-03
Related
Compliance Framework
CIS v8.0
CIS v8.0
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Identity and Access Management (IAM)
Level N/A
Employ the separation of duties principle when implementing information system access.
Parent
Compliance Framework
CCM v4.0.10
Control Number
IAM-04
Related
Compliance Framework
CIS v8.0
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Identity and Access Management (IAM)
Level N/A
Employ the least privilege principle when implementing information system access.
Parent
Compliance Framework
CCM v4.0.10
Control Number
IAM-05
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Identity and Access Management (IAM)
Level N/A
Define and implement a user access provisioning process which authorizes, records, and communicates access changes to data and assets.
Parent
Compliance Framework
CCM v4.0.10
Control Number
IAM-06
Related
Compliance Framework
CIS v8.0
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Identity and Access Management (IAM)
Level N/A
De-provision or respectively modify access of movers / leavers or system identity changes in a timely manner in order to effectively adopt and communicate identity and access management policies.
Parent
Compliance Framework
CCM v4.0.10
Control Number
IAM-07
Related
Compliance Framework
CIS v8.0
CIS v8.0
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
CIS v8.0
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Identity and Access Management (IAM)
Level N/A
Review and revalidate user access for least privilege and separation of duties with a frequency that is commensurate with organizational risk tolerance.
Parent
Compliance Framework
CCM v4.0.10
Control Number
IAM-08
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Identity and Access Management (IAM)
Level N/A
Define, implement and evaluate processes, procedures and technical measures for the segregation of privileged access roles such that administrative access to data, encryption and key management capabilities and logging capabilities are distinct and separated.
Parent
Compliance Framework
CCM v4.0.10
Control Number
IAM-09
Related
Compliance Framework
CIS v8.0
ISO 27002:2022
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Identity and Access Management (IAM)
Level N/A
Define and implement an access process to ensure privileged access roles and rights are granted for a time limited period, and implement procedures to prevent the culmination of segregated privileged access.
Parent
Compliance Framework
CCM v4.0.10
Control Number
IAM-10
Related
Compliance Framework
CIS v8.0
CIS v8.0
ISO 27002:2022
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Identity and Access Management (IAM)
Define, implement and evaluate processes and procedures for customers to participate, where applicable, in the granting of access for agreed, high risk (as defined by the organizational risk assessment) privileged access roles.
Parent
Compliance Framework
CCM v4.0.10
Control Number
IAM-11
Related
Compliance Framework
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Identity and Access Management (IAM)
Level N/A
Define, implement and evaluate processes, procedures and technical measures to ensure the logging infrastructure is read-only for all with write access, including privileged access roles, and that the ability to disable it is controlled through a procedure that ensures the segregation of duties and break glass procedures.
Parent
Compliance Framework
CCM v4.0.10
Control Number
IAM-12
Related
Compliance Framework
CIS v8.0
ISO 27002:2022
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
