Route networked, privileged accesses through a dedicated, managed interface for purposes of access control and auditing.
|
|
| Control Identifier | SC-7(15) |
| Latest Sync Date | 19/12/24 09:18:14 |
| Discussion | Privileged access provides greater accessibility to system functions, including security functions. Adversaries attempt to gain privileged access to systems through remote access to cause adverse mission or business impacts, such as by exfiltrating information or bringing down a critical system capability. Routing networked, privileged access requests through a dedicated, managed interface further restricts privileged access for increased access control and auditing. |
| Related Controls | AC-2, AC-3, AU-2, SI-4. |