Privileged access to data repositories is limited to only what is required for users and services to undertake their duties.
Topic
Privileged access to systems
Applicable to
all
History
Dec 2023
Removed
The existing control relating to limiting privileged access to data repositories based on user duties was merged into the existing control relating to limiting access to systems and applications based on user duties. [ISM-1508, ISM-1853]
Jun 2023
Privileged access to data repositories is limited to only what is required for users and services to undertake their duties.
A new control was added covering privileged access to data repositories being limited to only what is required for users and services to undertake their duties.