The network device must audit the use of privileged accounts when accessing configuration and operational commands enabled for non-privileged accounts.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000035-NDM-NA	SRG-NET-000035-NDM-NA	SRG-NET-000035-NDM-NA_rule		Medium

Description
The concept of least privilege is applied to information system processes, ensuring the processes operate at privilege levels no higher than necessary to accomplish required organizational missions and/or functions. Accounts used to perform security-related functions must not be used to perform non-privileged functions on the network device. Processes that support security functions are especially critical to secure with granular or fine-grained privileges. These processes include mechanisms involved with configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters. This requirement is applicable to specific devices and does not involve the management of a network device.

Description

The concept of least privilege is applied to information system processes, ensuring the processes operate at privilege levels no higher than necessary to accomplish required organizational missions and/or functions. Accounts used to perform security-related functions must not be used to perform non-privileged functions on the network device. Processes that support security functions are especially critical to secure with granular or fine-grained privileges. These processes include mechanisms involved with configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters. This requirement is applicable to specific devices and does not involve the management of a network device.

STIG	Date
Network Device Management Security Requirements Guide	2013-07-30

Details

Check Text ( C-SRG-NET-000035-NDM-NA_chk )
This requirement is NA for network device management.

Fix Text (F-SRG-NET-000035-NDM-NA_fix)
This requirement is NA for network device management.