CC6.2 CC6
Logical and Physical Access Controls / CC6.2
Granting access only after it is authorized
In plain English
New user access is registered and approved before credentials are issued, and access is granted on the basis of a documented authorization rather than a verbal request.