Requirement · SOC2-CC6.2
CC6.2 · User registration and authorization prior to issuing credentials
Controls (4)
| Control | Name | Domain |
|---|---|---|
| ACC-02 | User access provisioning is approved before grant | Access Control |
| ACC-04 | Quarterly user access review of in-scope applications | Access Control |
| JML-01 | Leavers are de-provisioned within 24 hours | Joiner/Mover/Leaver |
| JML-02 | Mover access is recertified on role change | Joiner/Mover/Leaver |