scope:

This guidance applies to anyone in TfL with responsibility for setting system access controls for all information systems and services owned, operated or supported by (or on behalf of) TfL, including:

a) Operational and non-operational systems

b) All networks containing TfL systems (the scope is not limited to OneLondon or any other subset of domains)

c) All platforms utilised by TfL (including but not limited to Windows, Apple, UNIX, Linux and Solaris devices)

d) Systems managed centrally (e.g. using Active Directory) and managed locally (e.g. on a system-by-system basis)

e) Infrastructure devices (including but not limited to routers, switches and firewalls), in addition to end user computers and servers.