KSI-IAM-4.xlsx

	A	B	C	D	E	F	G	H	I	J	K	L	M	N	O	P
1	Duty Description	ISO	FedRAMP Workgroup	Security team	IT team	DevOps team	Customer Success and Support teams	Product Development team	QA Team	Vendor Owner	Chief Technology Officer (CTO)	Human Resources (HR)	Legal Counsel	AWS ISSO	Agency Customer	3PAO

2	Adds/Removes Privileged Admins (AWS)					X
3	Adds/Removes Non-privileged Admins (AWS)					X
4	Adds/Removes Privileged Admins (Google and other external services)				X
5	Adds/Removes Non-privileged Admins (Google and other external services)				X
6	Adds/Removes Customer Privileged Admins					X	X
7	Adds/Removes Customer Non-privileged Admins						X								X
8	Production Deployment					X
9	Enforces Physical Access Authorizations	X	X	X
10	Defines Least Privilege Needed to Perform Tasks	X	X	X
11	Reviews/Approves Policy	X	X	X
12	Enforces Policy	X	X	X	X	X	X	X	X		X	X
13	Performs Independent Assessment															X
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100