GCC (ACC) - Key Controls

Question 1

ACC01

Answer 1

Individuals access to systems is via a unique username and password which complies with WPP policy.

Question 2

ACC02

Answer 2

Review current listing of privileged access users by system and certify that they still have a relevant business need for such access.

Question 3

ACC03

Answer 3

All new privileged user accounts must be subject to appropriate review and approval prior to access being granted.

Question 4

ACC06

Answer 4

All new general user accounts must be subject to appropriate review and approval prior to access being granted.

Question 5

ACC07

Answer 5

Review and approve changes to user access

Question 6

ACC08

Answer 6

Requests to remove or change an individual’s access are raised in a timely manner.

Question 7

ACC09

Answer 7

Review the complete user lists for all systems to confirm they are active users.

Question 8

ACC10

Answer 8

Review the shared user ID lists for all systems and certify that all shared user IDs have an appropriate business justification and that mechanisms are in place to prevent mis-use of these accounts.

Question 9

ACC11

Answer 9

Review the complete user lists for all systems certify that all users have an appropriate business need to support their access.