Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

AIM-07: measure the number of times the account of the terminated person is represented in the logs as active between termination of employee and deactivation of account. If this number is non-zero, the control is not effective. #72

Open
pritikin opened this issue Oct 12, 2022 · 0 comments

Comments

@pritikin
Copy link
Collaborator

This is a proposed effectiveness metric from Walt Williams

IAM-07-M1
To test for effectiveness, you need to measure the number of times the account of the terminated person is represented in the logs as active between termination of employee and deactivation of account. If this number is non-zero, the control is not effective.

@pritikin pritikin changed the title need to measure the number of times the account of the terminated person is represented in the logs as active between termination of employee and deactivation of account. If this number is non-zero, the control is not effective. AIM-07: measure the number of times the account of the terminated person is represented in the logs as active between termination of employee and deactivation of account. If this number is non-zero, the control is not effective. Oct 12, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant