Optimum Web
ISO 27001NIS2SOC 2CR-ISO-05

Access Control Policy & Implementation

ISO 27001 access control policy + technical implementation. Covers A.5.15-5.18, NIS2, and SOC 2 in one engagement. Least-privilege enforced across all systems. $349.

Access Control Policy & Implementation by Optimum Web is a fixed-price compliance service covering ISO 27001 Annex A 5.15–5.18 — Access management. It costs $349 with 3–5 business days delivery by senior security engineers. Access Control Policy document (ISO 27001 aligned). 14-day warranty included.

Covers: ISO 27001 Annex A 5.15–5.18 — Access management

$349
Fixed price, VAT excluded
3–5 business daysSenior only
Access Control Policy document (ISO 27001 aligned)
User provisioning and de-provisioning procedures
Quarterly access review process and template
Technical least-privilege implementation across key systems

PayPal failed to load. Please refresh or contact us directly.

Email Us to Order
+373 22 843569
PayPal · SSL
👨‍💻 Senior only
14-day warranty
🆔 CR-ISO-05

This Service Covers

ISO 27001Annex A 5.15–5.18 — Information access, identity, authentication, access rights
NIS2Article 21(2)(j) — Multi-factor authentication and access control
SOC 2CC6.1 — Logical access security

What You Get

Comprehensive access control policy and technical implementation aligned to ISO 27001 Annex A 5.15-5.18. We create: Access Control Policy document (who can access what, based on business need-to-know), user provisioning and de-provisioning procedures, access review schedule and process, technical implementation of least-privilege across your systems. Includes gap assessment against ISO 27001, NIS2, and SOC 2 access control requirements.

How It Works

STEP 01
Gap Assessment

Audit current access management against ISO 27001 A.5.15-5.18

STEP 02
Policy Draft

Create Access Control Policy covering provisioning, review, and revocation

STEP 03
Implement

Configure least-privilege access, disable unnecessary admin accounts

STEP 04
Review Process

Set up quarterly access review template and schedule

Who Needs This

  • Companies preparing for ISO 27001 certification needing A.5.15-5.18 controls
  • Organizations with ad-hoc access management and no formal policy
  • Businesses with overly permissive access (everyone is admin) needing least-privilege
  • Companies that need access control documentation for SOC 2 or NIS2 compliance

ONGOING COMPLIANCE

Don't Want to Think About Compliance Every Quarter?

Compliance-as-a-Service: $790/month. We handle reviews, scans, documentation, security questionnaires. Your outsourced compliance officer.

Start CaaS — $790/month

Ready to Start?

$349 · 3–5 business days · 14-day warranty

PayPal failed to load. Please refresh or contact us directly.

Email Us to Order
+373 22 843569

Want ongoing compliance? Compliance-as-a-Service — $790/month

Learn more

Frequently Asked Questions

Is this enough for ISO 27001 Annex A 5.15-5.18?+
Yes. The policy document and implementation evidence satisfy all four controls: A.5.15 (Access control), A.5.16 (Identity management), A.5.17 (Authentication information), A.5.18 (Access rights). Ready for Stage 2 audit.
Do you implement least-privilege or just write the policy?+
Both. We write the policy AND implement it by reconfiguring access across your key systems. No point having a policy that doesn't match reality.
What about database-level access controls?+
Yes. We configure database-level roles and permissions (PostgreSQL roles, MySQL grants) to enforce least-privilege at the data layer, not just the application layer.
How do quarterly access reviews work?+
We provide a template and process: every quarter, designated reviewers check their team's access rights, confirm or revoke as needed, and the review is documented. We can run the first review for you.
Does this satisfy NIS2 access control requirements?+
Yes. NIS2 Article 21(2)(j) requires access control and multi-factor authentication. The policy and implementation cover access control; combine with CR-NIS2-09 for MFA.

Also Relevant

NIS2

MFA & Access Control Implementation

$249 · 2–3 business days
SOC 2

Access Review Process Setup

$299 · 2–3 business days
GDPR

Employee Offboarding — Full Access Revocation Audit

$179 · 1–2 business days

PayPal failed to load. Please refresh or contact us directly.

Email Us to Order
+373 22 843569