LUL - S1735
Information Technology Access Control
| Organization: | LUL |
| Publication Date: | 1 March 2022 |
| Status: | active |
| Page Count: | 6 |
scope:
This standard applies to IT access control for all employees, third-party consultants and contractors. It also applies to TfL's Information Technology team when controlling access through NGSD for TfL systems.
Purpose
This standard defines Transport for London's (TfL's) requirements for the management of Information Technology (IT) access control and for limiting employee and contractor access to different types of data. It summarises the information security access controls that align to the information security standard ISO27001.
The standard also supports the Information Technology Security Policy (P116) to manage and protect the confidentiality, integrity and availability of TfL's information assets from threats and vulnerabilities.
Document History