ISOISO 27001Annex A Controls OverviewEASYFree question
What does control A.8.5 (Secure authentication) require?
- A.Password complexity rules and rotation schedules based on the length of employment and the department of the account holder
- B.Single sign-on tokens and session timeouts based on the sensitivity of each application and the location of the user
- C.Biometric enrolment devices and fallback procedures chosen by the facilities team for building entry and the server room doors
- D.Secure authentication technologies and procedures based on information access restrictions and topic-specific policy
Why D is correct
A.8.5 requires implementing secure authentication technologies and procedures appropriate to the risk level and access requirements.
Know someone studying for ISO 27001? Send them this one.