IT, data & continuous
Logical Access Control
Technical and administrative measures that ensure only authorized users have electronic access to information systems, data, and programs. This includes authentication, authorization, the principle of least privilege, and continuous monitoring of user activities through audit logging. Logical access control is a core domain in ITGC.
Source: COSO Internal Control Framework 2013, ISO 27001, IIA GIAS 2024