ISO 27001 5.16 Identity Management Requirement:
"The full life cycle of identities shall be managed."[1]
ISO 27001 5.16 Identity Management Requirement Explanation:
Organizations should ensure that user accounts/identities are uniquely assigned. Shared accounts should be avoided and only used when there is no technical work around and a strong business need. System or service accounts must be approved by IT management. When an account is no longer required it shall be promptly disabled or deleted. Systems should also log changes made to user accounts/identities.
References:
Quick & Simple
Discover Our Cybersecurity Compliance Solutions:
Whether you need to meet and maintain your compliance requirements, help your clients meet them, or verify supplier compliance we have the expertise and solution for you