CM-05(05) Privilege Limitation for Production and Operation
(a) Limit privileges to change system components and system-related information within a production or operational environment; and
(b) Review and reevaluate privileges cm-5.5_prm_1.
| Parameter ID | Definition |
|---|---|
| cm-5.5_prm_1 | organization-defined frequency |
| cm-05.05_odp.01 | frequency |
| cm-05.05_odp.02 | frequency |
Baselines
- L
- M
- H
- P
Guidance
In many organizations, systems support multiple mission and business functions. Limiting privileges to change system components with respect to operational systems is necessary because changes to a system component may have far-reaching effects on mission and business processes supported by the system. The relationships between systems and mission/business processes are, in some cases, unknown to developers. System-related information includes operational procedures.
Related controls 1
- AC-02 Account Management L M H P