← All resourcesPRACTICAL RESOURCE
Cloud Access Control Security Questionnaire
There is no single answer for every organization. This questionnaire helps identify gaps and request the right evidence.
01
Identity and access
- □Is SSO supported and through which standards?
- □How are administrator roles and separation of duties configured?
- □How are joiner, mover and leaver processes managed?
02
Data and audit
- □Which events are recorded and for how long?
- □Who can view, export or delete information?
- □How are administrative actions and permission changes logged?
03
Service operations
- □What is the security incident process?
- □How are backup, recovery and availability handled?
- □Which security and certification documents are available for review?
04
Hardware and site
- □How does the system behave without connectivity?
- □How is communication to controllers and readers protected?
- □How is a lost card or digital credential revoked?