Control 06 - Access Control Management

Control 06 focuses on managing and enforcing access permissions for all systems, applications and data. It requires organizations to establish policies for granting, reviewing and revoking user accounts, employing least-privilege principles, and using mechanisms such as multi-factor authentication, role-based access and automated provisioning to reduce unauthorized access risks.