Logical Access Control Policy. Documented logical access policies and procedures must support role-based, “need-to-know” access (e.g., interdepartmental transfers, terminations) and ensure separation of duties during the approval and provisioning process. Each account provisioned must be uniquely identified. User access reviews must be conducted on a periodic basis.
Appears in 11 contracts
Sources: Master Subscription Agreement, Data Processing Agreement, Data Processing Addendum
Logical Access Control Policy. Documented logical access policies and procedures must support role-based, “need-need- to-know” access (e.g., interdepartmental transfers, terminations) and ensure separation of duties during the approval and provisioning process. Each account provisioned must be uniquely identified. User access reviews must be conducted on a periodic basis.
Appears in 1 contract
Sources: Call Off Contract