System and Organization Controls (SOC) 2/Logical and physical access controls/24 of 61
CC6.2Authorizes users prior to issuing system credentials and granting system access
Control family: Logical and physical access controls
Control description
Prior to issuing system credentials and granting system access, the entity registers and authorizes new internal and external users whose access is administered by the entity. For those users whose access is administered by the entity, user system credentials are removed when user access is no longer authorized.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.