Access Control Policy
Defines access rules, approval, least privilege, and review cadence.
Description
Defines how access is granted, changed, and removed across systems and data. Covers least privilege, MFA requirements, role-based access, privileged/admin access controls, periodic access reviews, segregation of duties, logging expectations, and exception handling.
Related Products
AI Governance Policy
Establishes governance structure, decision rights, and oversight.
AI Risk Management Policy
Sets risk principles, controls expectations, and accountability for AI.
Asset Management Policy
Controls for asset inventory, ownership, and protection.
Change Management Policy
Defines approvals and safeguards for system/process change.
Data Backup Policy
Backup requirements, testing cadence, and recovery expectations.
Data Governance Policy
Rules for data ownership, quality, lifecycle, and stewardship.