UnixTime

Research Note

Source Code Access Register

Use this register to record source repositories, access rights, owner approvals, and periodic review status.

On this page

When to use this

Use this register to record source repositories, access rights, owner approvals, and periodic review status.

Register

Repository/tool Owner User/group Access level Business need Approved by MFA required? Last reviewed Status
TBD TBD TBD Read/write/merge/admin/build/release TBD TBD Yes/No TBD Active/revoked

Minimum checks

  • Read/write/merge/admin rights are separated.
  • Access is based on business need.
  • MFA is required for repository/tool access where appropriate.
  • Access review is scheduled.
  • Leaver and role-change removal is covered.