%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M744%20-19C1119%20-19%201373%20196%201373%20529V1490H1020V558C1020%20401%20909%20289%20744%20289C581%20289%20469%20401%20469%20558V1490H116V529C116%20196%20367%20-19%20744%20-19Z'%20transform='translate(100.3688,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M116%200H1092V288H469V1490H116Z'%20transform='translate(124.5803,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M116%200H1092V288H469V1490H116Z'%20transform='translate(143.9432,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M691%20-20C1060%20-20%201280%20149%201280%20432C1280%20670%201113%20814%20825%20877L696%20907C563%20937%20476%20981%20476%201073C476%201156%20549%201217%20690%201217C832%201217%20911%201154%20921%201046H1260C1256%201322%201036%201510%20691%201510C353%201510%20111%201325%20111%201049C111%20825%20267%20696%20524%20637L682%20600C845%20563%20923%20518%20923%20433C923%20338%20833%20273%20687%20273C526%20273%20419%20347%20411%20492H72C78%20148%20318%20-20%20691%20-20Z'%20transform='translate(163.3061,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M792%20-20C888%20-20%20979%20-4%201062%2027L1183%20-117H1502L1278%20160C1416%20290%201500%20487%201500%20744C1500%201236%201191%201510%20792%201510C391%201510%2082%201236%2082%20744C82%20255%20391%20-20%20792%20-20ZM684%20531%20863%20296C840%20292%20817%20290%20792%20290C575%20290%20443%20450%20443%20744C443%201039%20575%201200%20792%201200C1008%201200%201140%201040%201140%20744C1140%20606%201111%20497%201057%20421L970%20531Z'%20transform='translate(185.5107,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M744%20-19C1119%20-19%201373%20196%201373%20529V1490H1020V558C1020%20401%20909%20289%20744%20289C581%20289%20469%20401%20469%20558V1490H116V529C116%20196%20367%20-19%20744%20-19Z'%20transform='translate(211.3629,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M47%200H439L536%20317H1032L1133%200H1529L1017%201490H544ZM619%20587%20639%20651C688%20820%20732%201008%20777%201209C825%201009%20874%20821%20926%20651L946%20587Z'%20transform='translate(235.5744,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M116%200H469V513H661L934%200H1321L1010%20569C1175%20643%201269%20789%201269%20995C1269%201299%201062%201490%20726%201490H116ZM469%20792V1204H651C817%201204%20903%201134%20903%20995C903%20856%20817%20792%20652%20792Z'%20transform='translate(261.0604,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M116%200H1149V288H469V612H1096V894H469V1202H1150V1490H116Z'%20transform='translate(283.3236,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3c/svg%3e)
Her gün denetime hazır, yalnızca denetim haftasında değil
Çoğu uyumluluk aracı kendiniz hakkında beyanda bulunmanızı ister, sonra o beyanları size puan olarak geri gösterir. Baykuş test edilebileni test eder, kalanı için kendi politikanızdaki maddeyi alıntılar. Denetim imzalandıktan sonra da denetlemeye devam eder. Puanınız, kanıtlananı bir belgeye dayananın dışında tutar. İkisini karıştıran bir sayı, güvenliğiniz hakkında hiçbir şey söylemez.
Kontrol görünümü.
Bir kontrol sonucuna nasıl ulaşır: ajanın yürüttüğü denetimler, ona bağlanan kanıtlar ve kararın dayandığı şey.
The entity implements logical access security software and infrastructure over protected information assets
What must be true
Access to production systems is granted through a managed identity, is removed when that identity is removed, and cannot be obtained by any route that bypasses it.
Why this outcome
Access Control Policy v4, line 41: single sign-on is mandatory for all production systems and local accounts are prohibited. The agent then verified that claim against the identity provider — 5 of 5 production systems are federated and no local account exists on any of them. The policy states the obligation; the test is what passes the control.