AC-6 (8)

Access ControlRev 5system

Least Privilege

Control Statement

Prevent the following software from executing at higher privilege levels than users executing the software: [Assignment: software].

Supplemental Guidance

In certain situations, software applications or programs need to execute with elevated privileges to perform required functions. However, depending on the software functionality and configuration, if the privileges required for execution are at a higher level than the privileges assigned to organizational users invoking such applications or programs, those users may indirectly be provided with greater privileges than assigned.

CCI Identifiers (2)

CCI-002232Defines the software that is prevented from executing at a higher privilege than users executing the software.CCI-002233Prevent the organization-defined software from executing at higher privilege levels than users executing the software.

Linked STIG Checks (104)

Across 79 STIGs. Click to expand.

AC-6 (8)

Least Privilege

Control Statement

Supplemental Guidance

CCI Identifiers (2)

Assessment Methods

Linked STIG Checks (104)