Emergency Access
What is Emergency Access?
Procedures for granting immediate temporary access to critical systems during emergencies when normal access control procedures cannot be followed.
Terms that appear alongside emergency access
Each of these is named in at least one of the same controls as emergency access. The number is how many controls name both.
- authentication 9 shared controls
- audit 7 shared controls
- authorization 6 shared controls
- access control 6 shared controls
- least privilege 5 shared controls
- separation of duties 4 shared controls
- multi factor authentication 4 shared controls
- oauth 3 shared controls
Frameworks that govern emergency access
What the standards actually require on emergency access
Requirements naming emergency access across 6 standards, quoted from the control text.
For CONFIDENTIAL, SECRET and TOP SECRET systems, personnel who received emergency access must be debriefed once the emergency is over.
new-zealand-information-security-manual-nzism::9.2.19.C.04 · 9.2.19.C.04 Debrief emergency access holders when emergency ends →Discloses the ability of device users to reach stored PII when a medical emergency requires immediate access: whether the device has an integral emergency access ('break-glass') feature, described in a note (EMRG-1).
mds2-medical-device::EMRG · EMRG Emergency access: disclose any break-glass access to PII in a medical emergency →The plan must require consistent criteria for the security boundaries that scope nonlocal access controls, management of every nonlocal access method and of access approvals, handling of consecutive authentication failures per the risk strategy, manual and aut...
api-1164::PR.AC-3 · PR.AC-3 Nonlocal access managed: boundaries, approvals, failed logons, session control, emergency access and log retention →Define a documented break-glass procedure for emergency access that bypasses normal SSO when the IdP is unavailable, with strong MFA, monitoring and post-use review.
SEC03-BP03 · Establish emergency access process →Toilets should have a hinged seat and lid, lighting and ventilation, clear signposting, a hinged door on each cubicle that locks from the inside, emergency access, positioning that ensures privacy and separation from other rooms by an airlock, sound-proof wall...
australia-model-code-of-practice-managing-the-work-environment-and-facilities::3.3b · 3.3 Design toilets for privacy, emergency access, lighting, ventilation and supplies →Control and record emergency ('break glass') access to a healthcare recipient's My Health Record, used only where permitted and subject to audit.
MYHR-SEC-6 · Emergency access controls →Questions people ask about emergency access
What is Emergency Access?
Why is Emergency Access important for compliance?
Which compliance frameworks address Emergency Access?
Where can I learn more about Emergency Access?
See how Emergency Access applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.