+AC-06(08) Privilege Levels for Code Execution

AC-06(08) Privilege Levels for Code Execution

Control

Prevent the following software from executing at higher privilege levels than users executing the software: [Assignement: software].

Discussion

In certain situations, software applications or programs need to execute with elevated privileges to perform required functions. However, depending on the software functionality and configuration, if the privileges required for execution are at a higher level than the privileges assigned to organizational users invoking such applications or programs, those users may indirectly be provided with greater privileges than assigned.

Assessment Objective

[Assignement: software] is prevented from executing at higher privilege levels than users executing the software.

Assessment Method

Examine

Access control policy procedures addressing least privilege list of software that should not execute at higher privilege levels than users executing software system design documentation system configuration settings and associated documentation system audit records system security plan other relevant documents or records

Interview

Organizational personnel with responsibilities for defining least privileges necessary to accomplish specified tasks organizational personnel with information security responsibilities system/network administrators system developers

1. Ħarsa ġenerali

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

Rekwiżiti

3. Regolamenti relatati

Regolamenti

Kwistjonijiet marbuta

Links
is blocked by AC-06(08) Privilege Levels for Code Execution – Assessment Procedure
is blocked by Privilege Levels for Code Execution