8.5.1.a Select a sample of user IDs, including both administrators and general users. Verify that each user is authorized to use the system according to company policy by performing the following:
- Obtain and examine an authorization form for each ID
- Verify that the sampled User IDs are implemented in accordance with the authorization form (including with privileges as specified and all signatures obtained,.), by tracing information from the authorization form to the system
8.5.1.b Verify that only administrators have access to management consoles for wireless networks