Introduction IRDAI ICS Annexure III Item 10 requires that user accounts inactive beyond a defined threshold be automatically disabled. The…
Introduction ISO 27001:2022 Annex A.5.18 requires that access rights be reviewed at regular intervals and when employment or contractual changes…
Introduction SOC 2 Trust Services Criteria CC5.1 requires that the entity selects and develops control activities that contribute to the…
Introduction SEBI CSCRF applies to all regulated entities but differentiates requirements by entity tier. Market Infrastructure Institutions face the highest…
Introduction SEBI CSCRF PR.AA.S1(G1g) and PR.AA.S1(G1h) require that user accounts inactive beyond a defined threshold be automatically disabled and that…
Introduction ISO 27001:2022 Annex A.8.2 requires that the allocation and use of privileged access rights be restricted, controlled, and reviewed.…
Introduction ISO 27001:2022 introduced A.8.16 as a new control with no direct equivalent in the 2013 version. The control requires…
Introduction SEBI CSCRF GV.OC.S2(G3) requires that logs, user details, and application data be accessible to SEBI on demand. This is…
Introduction GDPR consent requirements are specific, technically demanding, and frequently misimplemented. Article 6 establishes consent as one of six lawful…
Introduction SEBI CSCRF GV.OC.S2(G2) requires that responsibilities for privileged access be formally defined at capital markets entities. This is not…