CCI-002319

The organization documents in the security plan for the information system the rationale for authorization of the execution of privilege commands via remote access.

Implementation Guidance

The organization being inspected/assessed documents in the security plan for the information system the rationale for authorization of the execution of privilege commands via remote access.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the security plan to ensure the organization being inspected/assessed documents in the security plan for the information system the rationale for authorization of the execution of privilege commands via remote access.

Compelling Evidence

1.) Signed and dated system security plan (SSP) that documents and identifies the rationale for authorization of the execution of privilege commands via remote access.

The controls below (if any) were marked by NIST as being related to CCI-002319.