A usage profile, detailing privileges and access rights, is assigned to each user. Administration account is strictly controlled and given based on special authorisations.
Each IT asset user is uniquely identified to the network through a user ID. Every user ID has a secret password. This user ID and password is required for access to relevant company assets.
User Registration
An authorized person who control the levels of access is nominated to create user IDs that can be granted as per the level specified by data owners / project managers
ADMIN maintains and reviews formal records of registered users and their privileges, to make sure that all redundant user accounts are deleted at the earliest and appropriate access levels are maintained
User Authentication
Username and passwords are used by normal users for all services and servers
We use a two-factor authentication as per project and client requirements, for administrator access to critical servers and remote access to the network
A formal process is established to control the issue and maintenance of secure ID token to access clients' data and systems during system development and maintenance