CCI-002235
CCI-002235 Definition
Prevent non-privileged users from executing privileged functions.
| Status | |
| Type | CheckType.technical |
Master Assessment Datasheet
Implementation Guidance
Determine if non-privileged users are prevented from executing privileged functions.
Validation Procedures
Examine: [SELECT FROM: Access control policy; procedures addressing least privilege; system design documentation; system configuration settings and associated documentation; list of privileged functions and associated user account assignments; system audit records; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with responsibilities for defining least privileges necessary to accomplish specified tasks; organizational personnel with information security responsibilities; system developers]. Test: [SELECT FROM: Mechanisms implementing least privilege functions for non-privileged users].