Access Management
What is Access Management?
The set of processes and technologies used to manage and control user access to systems, applications, and data based on defined policies.
Terms that appear alongside access management
Each of these is named in at least one of the same controls as access management. The number is how many controls name both.
- privileged access management 39 shared controls
- authentication 38 shared controls
- access control 37 shared controls
- nist 27 shared controls
- multi factor authentication 26 shared controls
- identity and access management 25 shared controls
- least privilege 23 shared controls
- remote access 20 shared controls
Frameworks that govern access management
What the standards actually require on access management
Requirements naming access management across 6 standards, quoted from the control text.
Manage operator and administrator access to DER management systems with role-based access controls and multi-factor authentication.
DER-PR-05 · Identity and Access Management for DER Operators →Agencies should assess and decide on the risk posed by centralised access management systems, SSO included, so that integration into systems can be handled safely, including where federated identity management (FIM) is used.
new-zealand-information-security-manual-nzism::16.1.30.C.01 · 16.1.30.C.01 Risk assessment of centralised access management and SSO →Remote connections to the FI's internal network should be encrypted against sniffing and eavesdropping and protected by strong authentication such as multi-factor authentication, and remote access to information assets should be allowed only from devices secur...
monetary-authority-of-singapore-technology-risk-management-guidelines::9.3 · 9.3 Remote Access Management →Cybersecurity requirements for identity and access management are identified, documented and approved.
saudi-nca-ecc::2-2-1 · 2-2-1 Identity and access management requirements defined and approved →Manage privileged access with Just-in-Time / Just-Enough-Administration through a PAM solution.
DODZT-1.4 · Privileged Access Management →Management implements identity and access management across people, processes and technology to authenticate users and grant or deny access to data and system resources, considers enhanced authentication especially for privileged access, addresses the access c...
ffiec-it-examination-handbook::AIO-VI.A.3 · VI.A.3 Identity and Access Management (Architecture, Infrastructure, and Operations) →Questions people ask about access management
What is Access Management?
Why is Access Management important for compliance?
Which compliance frameworks address Access Management?
Where can I learn more about Access Management?
See how Access Management applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.