Category:Identity Management, Authentication and Access Control (PR.AC)

From GCA ACT

Revision as of 03:25, 23 October 2023 by Globalcyberalliance (talk | contribs) (Created via script)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Jump to navigation Jump to search

Subcategories

This category has the following 7 subcategories, out of 7 total.

P

PR.AC-1: Identities and credentials are issued, managed, verified, revoked, and audited for authorized devices, users and processes‎ (1 P)
PR.AC-2: Physical access to assets is managed and protected‎ (1 P)
PR.AC-3: Remote access is managed‎ (1 P)
PR.AC-4: Access permissions and authorizations are managed, incorporating the principles of least privilege and separation of duties‎ (1 P)
PR.AC-5: Network integrity is protected (e.g., network segregation, network segmentation)‎ (1 P)
PR.AC-6: Identities are proofed and bound to credentials and asserted in interactions‎ (1 P)
PR.AC-7: Users, devices, and other assets are authenticated (e.g., single-factor, multi-factor) commensurate with the risk of the transaction (e.g., individuals’ security and privacy risks and other organizational risks)‎ (1 P)

Retrieved from ‘https://act.gcai.dev/index.php?title=Category:Identity_Management,_Authentication_and_Access_Control_(PR.AC)&oldid=4566’

PROTECT (PR)

Navigation menu