ISO 27001 5.15 Access Control Requirement:
"Rules to control physical and logical access to information and other associated assets shall be established and implemented based on business and information security requirements."[1]
ISO 27001 5.15 Access Control Requirement Explanation:
As part of the information security policy define access control policies to limit access to systems and information. Examples include defining password length and reset requirements.
References:
Quick & Simple
Discover Our Cybersecurity Compliance Solutions:
Whether you need to meet and maintain your compliance requirements, help your clients meet them, or verify supplier compliance we have the expertise and solution for you