CM-11(2)

CM-11(2): Software Installation with Privileged Status

Allow user installation of software only with explicit privileged status.

Privileged status can be obtained, for example, by serving in the role of system administrator.

Overlays
DAF Baseline

CSF Categories
None

The controls below (if any) were marked by NIST as being related to CM-11(2).

Control	Description
AC-5	a: Identify and document [duties of individuals requiring separation are defined;] ; and b: Define system access authorizations to support separation of duties.
AC-6	Employ the principle of least privilege, allowing only authorized accesses for users (or processes acting on behalf of users) that are necessary to accomplish assigned organizational tasks.

The controls below (if any) add on to the requirements of CM-11(2).

Control	Description
No controls

The CCIs below are tied to CM-11(2).

CCI	Definition
CCI-003980	Allow user installation of software only with explicit privileged status.