Test 2.2.1.2 [EDC+VC] #176
Description
Test 2.2.1.2 [EDC+VC]
- Business capability: Data product publication
- Customer journey: Publication
- Customer sub-journey: Data product offering submittal
Test description
Test that the administrative interface of the connector complies with ISO 27001 Annex 9.x (Access Control procedures) or, alternatively, NIST 800-53 AAA. More in detail:
Assess: administrative accounts are segregated (multi-tenancy of connectors’ operators).
Test type
Assessment
Execution phase
Phase 1
Minimal?
Yes
Extra information
ISO25010 Quality
Security
ISO25010 Quality description
The administrative interface is secure and preserves confidentiality of session.