Скачать или смотреть ISO 27001 Annex A 5.17 - Authentication Information Explained

Learn how to implement ISO 27001 Annex A 5.17 Authentication Information and pass the audit.

✅ ISO 27001 Toolkit: https://hightable.io/product/iso-2700...

👩‍💻 Blog: https://hightable.io/iso-27001-annex-...

Allocation and management of authentication information should be controlled by a management process, including advising personnel on the appropriate handling of authentication information.

This step by step tutorial walks you through how to implement it, pass the audit, common mistakes people make and what an auditor will look for.

How to implement ISO 27001 Authentication Information

Create temporary authentication information for first time use
Making sure the temporary authentication is hard to guess and unique for each person
Make sure it must be changed on first use.
Send authentication information to people in a secure way, not by email or in clear text.
Ensure that the user acknowledges that they have received this information.
Keep a record of what we have allocated and what we have managed and protect that record.
If a vendor or supplier provides for default passwords, pins and authentication information then change that immediately.

#iso27001 #iso27001certification