CCI-000040

The organization audits any use of privileged accounts, or roles, with access to organization-defined security functions or security-relevant information, when accessing other system functions.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-000040.