Sensitive Function and Export Control Checklist

When to use this

Use this checklist when reviewing whether sensitive application functions, reports, downloads, exports, and print features are restricted according to access rules.

Related controls

• A.8.3 Information Access Restriction
• Information Access Rule Matrix
• Information Classification and Handling Matrix

Checklist

• Identify sensitive functions, reports, utilities, and exports.
• Confirm each item has an owner.
• Map each item to approved roles.
• Confirm unauthorized users cannot see or launch restricted functions.
• Confirm report builders cannot bypass normal access restrictions.
• Confirm exports/downloads are limited where required.
• Confirm printed output follows classification and handling rules.
• Confirm logs exist for high-risk exports or administrative functions.
• Confirm user manuals do not expose restricted operating details unnecessarily.

Review table