Navigate

• Top
• Description
• Related
• Enhancements
• CCIs

CM-11(2)

CM-11(2): Prohibit Installation Without Privileged Status

The information system prohibits user installation of software without explicit privileged status.

Supplemental

Privileged status can be obtained, for example, by serving in the role of system administrator.

CIA Levels
Confidentiality	high
Integrity	high
Availability	unknown

Overlays
None

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to CM-11(2).

Control	Description
AC-6	The organization employs the principle of least privilege, allowing only authorized accesses for users (or processes acting on behalf of users) which are necessary to accomplish assigned tasks in accordance with organizational missions and business functions.

Enhancements

The controls below (if any) add on to the requirements of CM-11(2).

Control	Description
No controls

Related CCIs

The CCIs below are tied to CM-11(2).

CCI	Definition
CCI-001812	The information system prohibits user installation of software without explicit privileged status.