The Institute of Internal Auditors. IIA Global Technology Audit Guide (GTAG) 9: Identity and Access Management, Issued by The Institute of Internal Auditors.This is a Best Practice Guideline and is mapped as UCF Authority Document ID 0000944 as a part of the General Guidance category.This document's availability is With Membership. It can be found online at: http://www.theiia.org/guidance/technology/gtag9/This Authority Document has 42 citations mapped to 42 UCF Common Control IDs. The document as a whole was last reviewed and released on 2010-09-30.
Home
<ObjectTemplate ID="ID_056c1c52_4e2e_4ab9_97e4_8f55270094b7" TypeID="GRCDocument!System.Compliance.AuthorityDocumentProjection">
<Property Path="$Target/Property[Type='GRC!System.Compliance.AuthorityDocument']/ArticleId$">ID_056c1c52_4e2e_4ab9_97e4_8f55270094b7</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.AuthorityDocument']/DisplayName$">IIA Global Technology Audit Guide (GTAG) 9: Identity and Access Management</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.AuthorityDocument']/Title$">IIA GTAG 9</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.AuthorityDocument']/Type$">$MPElement[Name='GRCDocument!System.Compliance.AuthorityDocument.TypeEnum.NotSet']$</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.AuthorityDocument']/DocumentCategory$">$MPElement[Name='GRCDocument!System.Compliance.AuthorityDocument.CategoryEnum.GeneralGuidance']$</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.AuthorityDocument']/ExternalId$">ID_056c1c52_4e2e_4ab9_97e4_8f55270094b7</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.AuthorityDocument']/ExternalName$">Microsoft Corporation</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.AuthorityDocument']/ExternalVersion$">1</Property>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_2f1481bc_012d_4d34_8f23_023dffc0cb15</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.4.5 ¶ 2</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_9cce7166_3ee1_47d1_a6b7_0ab164ffe783</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.3.1 (Provisioning and Access Right Changes), § 3.4.2, § 4.2.2 (Determine Entitlement Life Cycle Controls)</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_ba1d78c0_c804_4ab7_8b00_0ca18fec8774</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 4.2.1 (Document Controls for Identity Repositories)</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_f133cb27_e7df_408e_8b22_14e2cf21abce</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.1.2</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_73bdb548_ed90_4fe6_a583_1a91ca5122d4</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.4.4 ¶ 3</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_e6c8347d_f25d_430b_9972_1cf879d6eec0</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.5.5 ¶ 1</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_531cc429_59bc_4547_ab43_25a388f13412</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.4.5 ¶ 1</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_cdcf13d8_91a6_4b64_9d07_315ba10a58bd</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 4.2.2 (Document Controls for Entitlement Repositories)</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_9323236f_3131_483e_a9f8_3634a28ba4ee</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3 ¶ 3, § 3.1.1</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_4412589f_0796_465d_961f_3a1b908d2be4</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">IIA GTAG 9 - GRCAD TOC Placeholder </Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_2bfb1f43_e60a_494c_a21f_3e2a40ab7885</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.2.3</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_3c3f4b6d_02ca_46f4_9a97_402ea59eedb1</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.1.2, § 3.4.3, § 4.2.1 (Determine Controls Within the Identity Life Cycle Process)</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_657dd3d2_8c44_4271_848e_420ca8d42f7d</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.4.3 ¶ 4</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_b8304d20_37cd_4ab0_bb7a_490d84a3d998</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 4, § 4.1</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_f54a782b_826d_4d0e_baf6_4cbd17cce60e</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.2.1, § 3.3.2 (Monitoring Privileged Accounts)</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_01810c8e_d56e_4f13_981f_4eaba7abe8fc</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.5.5 ¶ 2</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_bd1cc5ab_9bfb_4e14_8035_513fe34bc149</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 4.1.1 ¶ 2</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_0b9dd34a_a3cf_4a61_a5d4_58b3e4921ea4</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 4.2.2 (Determine Entitlement Repositories) ¶ 2</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_7d47da25_e1c4_4101_8992_5fcf7c067f9f</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.3.3 (Conflicts)</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_fe0b039d_8df8_4b1e_9204_6d108b5e44e3</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.5.5 ¶ 2</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_0ecce568_2f36_4d48_b097_703d2ed4b219</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 4.2.1 (Determine Controls Within the Identity Life Cycle Process) ¶ 3</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_562617b9_d3a3_4610_9bec_74076f79afe0</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.4.4 ¶ 3</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_ac6f6467_dff8_4b24_a109_876de6d5a3ee</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.5.1 (Periodic Audits)</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_616d1011_ea8f_410d_b4a9_8db7681e4a03</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 4.2.1 ¶ 1 thru ¶ 2</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_09d8f613_88d3_4b68_bd50_9a3fdf1d5542</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3 ¶ 2, § 3.4.1, § 4.2.1 (Determine Identity Repositories) ¶ 2</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_eb3acbe5_a7a6_4274_9e39_9aac6e984cf3</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.4.4</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_6495c3c9_79d8_49c9_a019_a6faa05c8c2a</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 4.1.1 ¶ 3</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_3e162753_7696_4c30_bfde_a9c131ff2d08</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.5.2</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_4a6cf794_105c_4754_bfde_afc3c7c434e8</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.3.1 (Non-person Account Access Rights)</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_9f6dbcd3_32fa_47d9_ae83_afdd6589b631</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 4.1.2</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_58c1988e_8ef1_41be_9ed9_b6943e7280c0</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.3.2 (Granting Privileged Account Access to an Identity)</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_b3980cf8_4043_49b2_9ea4_c0ccee540e5a</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 4.1.4</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_9588188c_fd0f_4a0f_841f_c5dd509d3da9</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3 ¶ 3, § 3.4.4</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_e1dd7320_21a6_494c_be23_cda7bb1f14df</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3 ¶ 3, § 3.3.2 (Granting Privileged Account Access to an Identity), § 3.4.4 ¶ 1, § 3.5.3, App A</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_7bd4ecf5_f5a5_4859_89ec_d0c3513cc9d0</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.4.5 ¶ 1</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_dfa178cb_8ce4_4496_a45d_d48cf8fc7511</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.6.2</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_d8d59f71_651e_4185_aace_db72f5ca75a0</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 4.1.3</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_da42bc56_7466_4107_acea_de7e31b5d5f8</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.5.1 (Periodic Audits)</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_ba9a4839_9dfc_46be_b1ac_dec291805102</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.4.5 ¶ 2</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_dfab44be_459c_419b_818e_f2e3e20562b5</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.5.6</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_c7dca31b_d5f3_46e4_a3c7_f63e2adbaeb7</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.4.5 ¶ 2</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_f475cc45_1423_4ee1_a986_fd1801b8700b</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.5.5 ¶ 2</Property>
</Object>
<Object Path="$Target/Path[Relationship='GRC!System.Compliance.ComplianceDocumentHasCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_cc54889d_10fe_4e55_ace9_fff18d06789d</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.Citation']/Section$">§ 3.3.3 (Periodic Monitoring of Access Rights), § 3.5.1 (Segregation of Duties), § 3.5.1 (Entitlement Reviews), § 4.2.2 (Document Entitlements), § 4.2.2 (Identify How Reconciliation and Oversight Are Performed)</Property>
</Object>
</ObjectTemplate>