Policy
Identity and Access Management Policy
To ensure that all users, human, service, and machine, are uniquely identified, appropriately authenticated, and authorized according to business need, while maintaining compliance with information security, privacy, and regulatory obligations.
- Type
- Policy
- Version
- 1.3.31
- Date
- 2026-10-27
- Owner
- Chief Information Security Officer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Information Security
- Review frequency
- Annual and upon material threat, framework, or regulatory change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- 1. Purpose
- 2. Scope
- 3. Governance and accountability
- 4. Policy statements
- 5. Framework alignment
Frameworks it maps to
Related documents
- Information Security Policysecurity
- Privileged Access Management Standardsecurity
- Authentication and Password Management Standardsecurity
- Logging and Monitoring Standardsecurity
- AI Security and Risk Standardai
Next
All Documents