SOC 2 Academy: Registering Internal and External Users

SOC 2 Academy: Registering Internal and External Users

KirkpatrickPrice

5 лет назад

413 Просмотров

Learn more at https://kirkpatrickprice.com/video/soc-2-academy-registering-internal-external-users/

When entities hire new employees or enter into new business partnerships, they need to have processes in place for registering internal and external users. For example, an organization’s human resources manager might notify the IT administrator via memo that a new employee has been hired and that they need user credentials and access to limited network resources. This would be a clear and efficient process for alerting the IT administrator that they are authorized to create new access credentials for the employee but only for limited resources.
During a SOC 2 audit, an assessor will verify that the organization has such processes in place for registering internal and external users, but they will also verify that the organization has process in place for removing access for internal users when an employee quits or is terminated, or an external user no longer needs access to the network resources to fulfill their job. Having such processes in place limits the risk of unauthorized access and supports an organization’s ability to keep their assets secure.
Stay Connected
Twitter: https://twitter.com/KPAudit
LinkedIn: https://www.linkedin.com/company/kirkpatrickprice-llc
Facebook: https://www.facebook.com/kirkpatrickprice/

More Free Resources
Blog: https://kirkpatrickprice.com/blog/
Webinars: https://kirkpatrickprice.com/webinars/
Videos: https://kirkpatrickprice.com/video/
White Papers: https://kirkpatrickprice.com/white-papers/

About Us
KirkpatrickPrice is a licensed CPA firm, PCI QSA, and a HITRUST CSF Assessor, registered with the PCAOB, providing assurance services to clients in more than 48 states, Canada, Asia, and Europe. The firm has over 13 years of experience in information security and compliance assurance by performing assessments, audits, and tests that strengthen information security and internal controls. KirkpatrickPrice most commonly provides advice on SOC 1, SOC 2, PCI DSS, HIPAA, HITRUST CSF, GDPR, ISO 27001, FISMA, and CFPB frameworks.

For more about KirkpatrickPrice: https://kirkpatrickprice.com/
Contact us today: 800-770-2701 https://kirkpatrickprice.com/contact/

Тэги:

#KirkpatrickPrice #KP #Joseph_Kirkpatrick #audit #compliance #SOC_2 #SOC_2_audit #SOC_2_compliance #SOC_2_report #SOC_2_reporting #AICPA #Trust_Services_Criteria #Common_Criteria #TSP #registering_users #password_management #user_credentials
Ссылки и html тэги не поддерживаются


Комментарии: