← ISO 27001 Annex A in plain English

A.5.15 A.5

Organizational / A.5.15

Deciding who may access what, on what basis

Think of it likeThe teenagers have a front door key; the babysitter does not.

In plain English

The family decides who may reach what, based on what each person actually needs, rather than giving everyone the same access for convenience.

Related CSF and CIS controls (unofficial mapping)