A method for deciding, on evidence, whether an agent may go live with its access and keep it.
What the evidence pack covers
The asset walks a gate owner through the gate structure, criteria, the control evidence register, exceptions, the review, and the acceptance record. It includes a gate checklist, a control evidence register, and an acceptance record template, with a worked synthetic case.
- The gates agent access passes
- Acceptance criteria by risk
- Mandatory criteria for identity, role, just in time, credentials, revocation, and attribution
- The evidence each gate needs and who produces it