Detections
Analytics
800-53|AC-6(3)
Title
NETWORK ACCESS TO PRIVILEGED COMMANDSDescription
The organization authorizes network access to [Assignment: organization-defined privileged commands] only for [Assignment: organization-defined compelling operational needs] and documents the rationale for such access in the security plan for the information system.Supplemental
Network access is any access across a network connection in lieu of local access (i.e., user being physically present at the device).Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Related: AC-17
Category: ACCESS CONTROL
Parent Title: LEAST PRIVILEGE
Family: ACCESS CONTROL
Baseline Impact: HIGH
Audit Items
View all Reference Audit Items