+AC-06(03) Network Access to Privileged Commands

AC-06(03) Network Access to Privileged Commands

Control

Authorize network access to [Assignement: privileged commands] only for [Assignement: compelling operational needs] and document the rationale for such access in the security plan for the system.

Discussion

Network access is any access across a network connection in lieu of local access (i.e., user being physically present at the device).

Assessment Objective

  1. network access to [Assignement: privileged commands] is authorized only for [Assignement: compelling operational needs];
  2. the rationale for authorizing network access to privileged commands is documented in the security plan for the system.

Assessment Method

Examine

Access control policy procedures addressing least privilege system configuration settings and associated documentation system audit records list of operational needs for authorizing network access to privileged commands system security plan other relevant documents or records

Interview

Organizational personnel with responsibilities for defining least privileges necessary to accomplish specified tasks organizational personnel with information security responsibilities

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
is blocked by AC-06(03) Network Access to Privileged Commands – Assessment Procedure
is blocked by Network Access to Privileged Commands