Enterprise Security Assessment > Data and Asset Security > Access Control

Do you have an Access Control Policy in place?

book reader icon
1 Minute
12/03/2024
facebook logo gray
linkedin logo gray
mail logo gray

Yes. QR Planet's Access Control Policy has been developed in accordance with all relevent compliance requirements and current standards. It has been approved by management, communicated to all appropriate employees and is subject to at least annual reviews by management and external constultants.

Last update 2 weeks ago

Do you limit access to your systems that store or process Scoped Data?

Yes. Both physical and remote access to all of QR Planet's systems, whether storing or processing scoped or other data, is restricted on a need-to-access-basis.

Do you have a process in place for the appropriate handling of user access rights?

Yes. Access rights are reviewed periodically and also when a Constituent's role changes, and are adjusted if necessary, especially privileged access rights.

Do you have a Remote Access Policy in place?

QR Planet's remote access policy includes Multi-Factor Authentication, VPN Access, complex and encrypted passwords, and the monitoring of remote access.

Do you perform remote administration tasks of organizational assets in a manner preventing any unauthorized access?

All possible remote administration of organizational assets is done by pre-approved parties with restricted access as befits their role (RBAC) and requirement.

Do your require encrypted communications for all remote system access?

Yes. Any system access by remote sources needs to be encrypted, as required by our Remote Access and our Network Security Policies.