+03.01.06 Least Privilege – Privileged Accounts

03.01.06 Least Privilege – Privileged Accounts

Statement

  • a. Restrict privileged accounts on the system to {{ insert: param, A.03.01.06.ODP.01 }}..

  • b. Require that users (or roles) with privileged accounts use non-privileged accounts when accessing non-security functions or non-security information.

Guidance

Privileged accounts refer to accounts that are granted elevated privileges to access resources (including security functions or security-relevant information) that are otherwise restricted for non-privileged accounts. These accounts are typically described as system administrator or super user accounts. For example, a privileged account is often required in order to perform privileged functions such as executing commands that could modify system behavior. Restricting privileged accounts to specific personnel or roles ensures that only those authorized users can access and manipulate security functions or security-relevant information. Requiring the use of non-privileged accounts when such access is not needed can limit unauthorized access to and manipulation of security functions or security-relevant information.

Assessment objective

privileged accounts on the system are restricted to {{ insert: param, A.03.01.06.ODP.01 }}.

Assessment objective

users (or roles) with privileged accounts are required to use non-privileged accounts when accessing non-security functions or non-security information.

Assessment method

  • access control policy and procedures procedures for least privilege list of system-generated privileged accounts list of system administration personnel system audit records system configuration settings system security plan list of system-generated security functions or security-relevant information assigned to system accounts or roles other relevant documents or records

Assessment method

  • personnel with responsibilities for defining least privileges personnel with information security responsibilities system administrators

Assessment method

  • mechanisms for implementing least privilege functions

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
is blocked by 03.01.06 Least Privilege – Privileged Accounts – Assessment Procedure
is blocked by Role-Based Access Control (RBAC)
is blocked by Management Approval For Privileged Accounts
is blocked by Privileged Account Management (PAM)
is blocked by Access Enforcement
is blocked by Least Privilege
is blocked by Non-Privileged Access for Non-Security Functions