Athena Compliance Centre - Access Control Details

Domain

Summary

Minimises potential damage on a misused or stolen staff account by giving permissions on a least privileged basis. Extra permissions given by request.

Overview

To minimise the potential damage that could be done if an account is misused or stolen, staff accounts should have just enough access to software, settings, online services and device connectivity functions for them to perform their role. Extra permissions should only be given to those who need them.

Detailed Description

Reference/Support Links

Governing bodies/Certifiers/Legislation Links