Work Product (Artifact): Access Control Action Plan
The composed action plan after the review of the Risk Control Assessment & Vendor Documentation against the Access Control Standard has taken place.
Relationships
RolesResponsible: Modified By:
Input ToMandatory: Optional:
  • None
External:
  • None
Output From
Main Description
The composed action plan after the review of the Risk Control Assessment & Vendor Documentation against the Access Control Standard and the review of the Application against the Access Control Standard to see if the Application complies, has taken place.
Properties
Optional
Planned
Tailoring
Impact of not havingWill not know if exceptions need to be filed.
Reasons for not needing
  • Upgrades to a system that has no user authentication changes.
  • Projects that do not include applications.