CCI-002319

Document the rationale for authorization of the execution of privilege commands via remote access.

Implementation Guidance

Determine if the rationale for remote access is documented in the security plan for the system.

Validation Procedures

Examine: [SELECT FROM: Access control policy; procedures addressing remote access to the system; system configuration settings and associated documentation; security plan; system audit records; system security plan; other relevant documents or records]. Interview: [SELECT FROM: System/network administrators; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Mechanisms implementing remote access management].

The controls below (if any) were marked by NIST as being related to CCI-002319.