| The concept of least privilege is applied to information system processes, ensuring the processes operate at privilege levels no higher than necessary to accomplish required organizational missions and/or functions. Accounts used to perform security-related functions must not be used to perform non-privileged functions on the network device. Processes that support security functions are especially critical to secure with granular or fine-grained privileges. These processes include mechanisms involved with configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters.
This requirement is applicable to specific devices and does not involve the management of a network device. |
