CCI-001422

Implementation Guidance

The organization being inspected/assessed implements as a step in the access authorization process, a check to prohibit privileged access to the information system by non-organizational users.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the access authorization process as well as a sampling of information system access agreements to ensure that the organization being inspected/assessed prohibits privileged access to the information system by non-organizational users.

Compelling Evidence

1.) Access authorization process, which shows step to prohibit privileged access to the information system by non-organizational users.