Sekit CSF · Familia
Identity & Access Management
30 controles en 10 temas, cada uno visto a través de las lentes de política, proceso y técnica.
Política
RCF-0085Access reviews (recertification)sin mapeos aúnAccess rights are formally reviewed periodically to confirm they remain appropriateRCF-0061Identity lifecyclesin mapeos aúnUser accounts are formally managed from creation to deletion across all systemsRCF-0088JML (joiner-mover-leaver)sin mapeos aúnA formal process covers access management for joiners, movers and leaversRCF-0067Least privilege / RBACsin mapeos aúnUsers only have access to what their role requiresRCF-0076Password policysin mapeos aúnStrong password requirements are formally defined and communicatedRCF-0070Privileged access managementsin mapeos aúnAdministrator accounts are strictly controlled and separated from regular accountsRCF-0082Remote accesssin mapeos aúnClear rules govern how employees access company systems remotelyRCF-0079Session managementsin mapeos aúnInactive sessions are formally required to terminate after a defined periodRCF-0073SSO & federationsin mapeos aúnA centralised identity system allows secure access to all applications with one loginRCF-0064Strong authentication (MFA)sin mapeos aúnA second verification step beyond password is required to access critical systems
Proceso
RCF-0086Access reviews (recertification)sin mapeos aúnManagers regularly confirm their team has the correct level of accessRCF-0062Identity lifecyclesin mapeos aúnThere is a consistent process for onboarding and offboarding user accessRCF-0089JML (joiner-mover-leaver)sin mapeos aúnHR and IT coordinate promptly when employment status changesRCF-0068Least privilege / RBACsin mapeos aúnAccess rights are adjusted when roles change and removed when no longer neededRCF-0077Password policysin mapeos aúnEmployees consistently use a password manager and follow password hygieneRCF-0071Privileged access managementsin mapeos aúnPrivileged access is logged, time-limited and formally approvedRCF-0083Remote accesssin mapeos aúnRemote access is consistently configured securely and employees are trainedRCF-0080Session managementsin mapeos aúnUsers consistently lock screens and log out when leaving their workstationRCF-0074SSO & federationsin mapeos aúnNew applications are integrated with the central identity system before deploymentRCF-0065Strong authentication (MFA)sin mapeos aúnMFA is consistently applied with no informal exceptions
Técnica
RCF-0087Access reviews (recertification)sin mapeos aúnSystems automatically generate access reports to support periodic reviewsRCF-0063Identity lifecyclesin mapeos aúnAccount lifecycle is technically enforced — access is removed automatically when someone leavesRCF-0090JML (joiner-mover-leaver)sin mapeos aúnAccess provisioning and deprovisioning is automated through HR system integrationRCF-0069Least privilege / RBACsin mapeos aúnPermissions are enforced at the system level not based on user behaviourRCF-0078Password policysin mapeos aúnStrong password requirements are technically enforced at the system levelRCF-0072Privileged access managementsin mapeos aúnTechnical tools control and monitor all use of privileged accountsRCF-0084Remote accesssin mapeos aúnRemote connections are encrypted and restricted to approved devices onlyRCF-0081Session managementsin mapeos aúnScreen locks and session timeouts are technically enforced on all devicesRCF-0075SSO & federationsin mapeos aúnAll critical applications authenticate through a central identity providerRCF-0066Strong authentication (MFA)sin mapeos aúnMFA is technically enforced and cannot be bypassed
Pregúntale a Sekura: «¿Qué evidencia demuestra Identity & Access Management?»
Conecta tu IA · MCP gratis
https://staging.sekit.ai/api/mcp/crosswalk- En Claude o ChatGPT, añade un conector personalizado y pega esta URL.
- Inicia sesión con tu correo para terminar. Gratis, de solo lectura, sin necesidad de organización.