T5.4.1 - POLICY ON USE OF NETWORK SERVICES Implementation Guidance
The entity shall provide access to users only to the services that they have been specifically authorized to use.
Back to T5.4.1 - P2 - POLICY ON USE OF NETWORK SERVICES
A policy should be formulated concerning the use of networks and network services. This policy should cover:
A. The networks and network services which are allowed to be accessed;
B. Authorization procedures for determining who is allowed to access which networks and networked services
C. Management controls and procedures to protect access to network connections and network services
D. The means used to access networks and network services (e.g. use of VPN or wireless network)
E. The policy on the use of network services should be consistent with the entities access control policy
