Privileged access to data repositories is automatically disabled after 12 months unless revalidated.
Topic
Suspension of access to systems
Applicable to
all
History
Dec 2023
Removed
The existing control relating to privileged access to data repositories being automatically disabled after 12 months unless revalidated was merged into the existing control relating to privileged access to systems and applications being disabled after 12 months unless revalidated. [ISM-1647, ISM-1734]
Dec 2021
Privileged access to data repositories is automatically disabled after 12 months unless revalidated.
Miscellaneous changes were made to rationale and security controls throughout the publication. This included: A review from the Using the Information Security Manual chapter through to the Guidelines for Media chapter.