Access Provisioning
What is Access Provisioning?
The process of granting users the appropriate access rights and permissions to systems and resources based on their role and business need.
Terms that appear alongside access provisioning
Each of these is named in at least one of the same controls as access provisioning. The number is how many controls name both.
- authorization 3 shared controls
- privileged access management 3 shared controls
- access management 3 shared controls
- authentication 3 shared controls
- multi factor authentication 2 shared controls
- identity and access management 2 shared controls
- access control 2 shared controls
- cybersecurity 2 shared controls
Frameworks that govern access provisioning
What the standards actually require on access provisioning
Requirements naming access provisioning across 6 standards, quoted from the control text.
Run an access provisioning process that authorises each grant, records it, and communicates changes to data and asset access to the affected parties.
CCM-IAM-06 · User Access Provisioning →Define and run a process for provisioning identity access that approves each change to access to data and assets, records it and tells the people affected.
cloud-security-alliance-cloud-controls-matrix-ccm-v4-1::IAM-06 · Access Provisioning →A formal process for provisioning user access is in place to grant or withdraw access rights for every type of user on every system and service.
iso-27001-2013::A.9.2.2 · User access provisioning →Cloud service customer: no additional guidance. Cloud service provider: provide functions for managing the access rights of the customer's cloud service users, with specifications for their use.
iso-27017-2015::9.2.2 · User access provisioning →Information security is to be built into the way projects are managed. Purpose: make sure security risks tied to projects and their deliverables are handled effectively through every stage of the project.
iso-27002-2022::5.8 · Information security in project management →Added HLT control: requirements for new information systems, and for enhancements to existing ones, should include the information security requirements.
iso-27799-2025::5.38 · 5.38 HLT: Information security requirements analysis and specification →Questions people ask about access provisioning
What is Access Provisioning?
Why is Access Provisioning important for compliance?
Which compliance frameworks address Access Provisioning?
Where can I learn more about Access Provisioning?
See how Access Provisioning applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.