Access Should Be Granted Intentionally By Tim Marley As we move into CIS Control 6, Access Control Management, we're going to spend the next several weeks discussing how organizations determine who gets access to what. We begin with Safeguard 6.1: Establish an Access Granting Process. At first glance, this control sounds simple. Someone needs access to a system, they ask for it, and IT provides it. In practice, however, that process is often far less structured than organizations...














