Enterprise Security Assessment > Data and Asset Security > Access Control

Do you provision your access controls according to the principle of least privilege?

book reader icon
1 Minute
12/03/2024
facebook logo gray
linkedin logo gray
mail logo gray

Yes. In accordance with all applicable compliance requirements and relevant internal policies, all access controls to applications, operating systems, databases, and network devices within QR Planet's environment - be it remote or on-site - are provisioned to the principle of least privilege.

Last update 2 weeks ago

Do you have an Access Control Policy in place?

QR Planet's Access Control Policy has been developed in accordance with all relevent compliance requirements and current standards and is subject to reviews.

Do you have a process in place for the appropriate handling of user access rights?

Yes. Access rights are reviewed periodically and also when a Constituent's role changes, and are adjusted if necessary, especially privileged access rights.

Do you employ security and hardening standards for network devices?

QR Planet's Network Security Policy is in accordance with current security standards. All our network devices deny all access by default and are up to date.

Do your network devices deny all access by default?

Yes. As required, all access attempts to QR Planet's network devices are denied by default and only permitted if necessary and explicitly allowed.

Do you have a Remote Access Policy in place?

QR Planet's remote access policy includes Multi-Factor Authentication, VPN Access, complex and encrypted passwords, and the monitoring of remote access.