Authorization, Authentication, and Access. In order to ensure that access to the Data is limited to authorized staff, the Contractor must:
Authorization, Authentication, and Access. In order to ensure that access to the Data is limited to authorized staff, the Indian Nation must:
Authorization, Authentication, and Access. In order to ensure that access to the Data is limited to authorized staff, the Contractor must: Have documented policies and procedures governing access to systems with the shared Data. Restrict access through administrative, physical, and technical controls to authorized staff. Ensure that user accounts are unique and that any given user account logon ID and password combination is known only to the one employee to whom that account is assigned. For purposes of non-repudiation, it must always be possible to determine which employee performed a given action on a system housing the Data based solely on the logon ID used to perform the action. Ensure that only authorized users are capable of accessing the Data. Ensure that an employee’s access to the Data is removed immediately: Upon suspected compromise of the user credentials. When their employment, or the contract under which the Data is made available to them, is terminated. When they no longer need access to the Data to fulfill the requirements of the contract.
