Access Policy
What is Access Policy?
A documented set of rules defining who is authorized to access specific resources, under what conditions, and with what level of permission.
Terms that appear alongside access policy
Each of these is named in at least one of the same controls as access policy. The number is how many controls name both.
- policy 4 shared controls
- firewall 2 shared controls
- nist 2 shared controls
- authentication 2 shared controls
- gateway 2 shared controls
Frameworks that govern access policy
What the standards actually require on access policy
Requirements naming access policy across 6 standards, quoted from the control text.
Maintain a written policy addressing how the organisation manages security and access to the My Health Record system, covering the matters required by the My Health Records Rule.
MYHR-SEC-1 · Written security and access policy →The entity keeps, and follows, a policy and procedures that govern who may physically reach 3DS systems. The assessor reads them and interviews staff.
pci-3ds-core-security-standard::P1-6.1.1 · P1-6.1.1 Physical-access policy and procedures for 3DS systems →Procedural controls in company policy, SMS and security procedures govern how people use onboard systems, and security-sensitive plans stay confidential.
BIMCO-7.3 · Procedural protection measures →Automate application access policy, testing, and deployment workflows across the applications pillar.
ZTMM-APP-AO · Applications Pillar: Automation and Orchestration →Data imported without attributes, such as the pre-shared key entered through the control and management interface, is imported under the access policy with defined rules.
iso-iec-23837-2023::1-9.2.8 · Part 1, 9.2.8 FDP_ITC.1 Import of user data without security attributes →Security Layer 2 Services per X.805 Clause 7.2: The Services Security Layer is concerned with security of network services that service providers offer to their customers - encompasses the protection of the basic network connectivity services + supplementary v...
X805-Layer2-Services-Security-Frame-Relay-ATM-IP-VoIP-QoS-Toll-Free-IM-VPN-AAA-DNS · ITU-T X.805 Security Layer 2 - Services Security + Frame Relay + ATM + IP + VoIP + QoS + Toll-Free + Instant Messaging + VPN + AAA Authentication-Authorization-Accounting + DNS + IMS + 5G + Cellular Mobile Voice + SMS →Questions people ask about access policy
What is Access Policy?
Why is Access Policy important for compliance?
Which compliance frameworks address Access Policy?
Where can I learn more about Access Policy?
See how Access Policy applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.