Common use of Access Administration Clause in Contracts

Access Administration. Access to the Services by Supplier employees and contractors is protected by authentication and authorization mechanisms. User authentication is required to gain access to production and sub- production instances. Individuals are assigned a unique user account. Individual user accounts shall not be shared. Access privileges are based on job requirements using the principle of least privilege access and are revoked upon termination of employment or consulting relationships. Access entitlements are reviewed regularly and no less than annually in the Security Program examination process. Infrastructure access includes appropriate user account and authentication controls, which will include the required use of VPN connections, complex passwords account lock-out enabled, and a multi-factor authenticated connection.