Identity Management, Authentication, and Access Control Policy

Purpose

To provide ¼«ËÙÁùºÏ²Ê¿ª½±½á¹û with guidance in developing and implementing the appropriate protective safeguards to ensure the confidentiality, integrity, and availability of ¼«ËÙÁùºÏ²Ê¿ª½±½á¹û assets and information.

Policy

Identity management, accounts, and access control are paramount to protecting ¼«ËÙÁùºÏ²Ê¿ª½±½á¹û’s system and requires the implementation of controls and oversight to restrict access appropriately. ¼«ËÙÁùºÏ²Ê¿ª½±½á¹û limits access to the system, system components, and associated facilities to authorized users, processes, and devices in support of ¼«ËÙÁùºÏ²Ê¿ª½±½á¹û’s mission and business functions.

Summary

A discussion of ¼«ËÙÁùºÏ²Ê¿ª½±½á¹û account types, creation, disabling and eligibility.

Identity Management, Authentication, and Access Control Policy Details [pdf]