Back

Establish, implement, and maintain off-site logical controls for all distributed assets.


CONTROL ID
11683
CONTROL TYPE
Technical Security
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Protect distributed assets against theft., CC ID: 06799

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • The security program, in relation to protecting personal information, should include implementing physical access controls and logical access controls to prevent unauthorized access. (Table Ref 8.2.1, Generally Accepted Privacy Principles (GAPP), CPA and CA Practitioner Version, August 2009)
  • Describe how financial institution management ensures that appropriate logical security controls exist at the RDC customer location, such as: (App A Tier 2 Objectives and Procedures N.7 Bullet 1 Sub-Bullet 5, FFIEC IT Examination Handbook - Retail Payment Systems, April 2016)