Reconcile access and contain unexplained accounts

Information governance, information security and data protection officer: Reconcile access and contain unexplained accounts. Starts when: An audit finding on access, or a quarterly review. Steps: Obtain user, administrator, service and third-party account records; Reconcile against establishment, leavers, role requirements and approvals; Suspend, reduce or formally accept unexplained access within a fortnight; Record. Done when: Privileged accounts reconcile to named current owners and unresolved segregation conflicts are counted and falling. Rules that apply: Auditor's control findings on Oracle access (Hillingdon).

Sign in with EDGE ID