+AC-06(04) Separate Processing Domains

AC-06(04) Separate Processing Domains

Control

Provide separate processing domains to enable finer-grained allocation of user privileges.

Discussion

Providing separate processing domains for finer-grained allocation of user privileges includes using virtualization techniques to permit additional user privileges within a virtual machine while restricting privileges to other virtual machines or to the underlying physical machine, implementing separate physical domains, and employing hardware or software domain separation mechanisms.

Assessment Objective

separate processing domains are provided to enable finer-grain allocation of user privileges.

Assessment Method

Examine

Access control policy procedures addressing least privilege system design documentation system configuration settings and associated documentation system audit records system security plan other relevant documents or records

Interview

Organizational personnel with responsibilities for defining least privileges necessary to accomplish specified tasks organizational personnel with information security responsibilities system developers

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
is blocked by AC-06(04) Separate Processing Domains – Assessment Procedure