Access control

Glesys uses structured access control processes to ensure least privilege, need-to-know, traceability, and periodic review.

Key elements:

• Access lifecycle: Documented granting, modification, and revocation processes with approvals and traceability.

• Annual access reviews: Information Owners perform annual reviews and document completion in the System Inventory.

• MFA & privileged access: MFA requirements and stricter controls for privileged accounts.