+SYS.2.2.3.A20 Use of User Account Control (UAC) for Privileged Accounts (S)

SYS.2.2.3.A20 Use of User Account Control (UAC) for Privileged Accounts (S)

For privileged accounts, the configuration parameters of User Account Control (UAC) SHOULD be set with an appropriate balance between user-friendliness and security. The decisions regarding the configuration parameters to be used SHOULD be documented. In addition, the related documentation SHOULD include all accounts with administrator rights. Regular checks SHOULD be carried out to determine whether the ability to extend rights is necessary.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.18 Poor Planning or Lack of Adaptation