Access Control Procedure

The objective of this procedure is to ensure the security of Company’s assets by applying the following rules:

a. All activities performed by a system, application or person that may affect the security of an information asset (physical or electronically format) should be allowed only after formal requesting and granting of permission.

b. All authorized activities performed by a system, application or person, having a major impact over the security of an information asset should be permitted through a set of access controls.

Effective security controls in relation to access the data are an essential component of the effective risk management of Company’s data resource. Access controls protect information by managing access at all entry and exit points, both logical and physical. These measures ensure that only authorized users, as determined by Company’s Board of Administration, have access to specific information, systems and facilities.

This procedure defines the Access Control Procedure for Company and how requests for access to Company systems and applications are initiated, processed, validated and executed.  The procedure encompasses all aspects of granting, revoking, or modifying access to Company systems and applications by employees, contractors, consultants, vendors and other third parties.

This procedure applies to all business functions and covers the information under the management of Company regardless of all locations.

Users who purchased Access Control Procedure, also purchased:

Identity and Access Management Standard

€49.00

Purchase Checkout Added to cart