AC-6.3: Network Access to Privileged Commands

network access to privileged commands is authorized only for compelling operational needs ;

the rationale for authorizing network access to privileged commands is documented in the security plan for the system.

Access control policy

procedures addressing least privilege

system configuration settings and associated documentation

system audit records

list of operational needs for authorizing network access to privileged commands

system security plan

other relevant documents or records

Organizational personnel with responsibilities for defining least privileges necessary to accomplish specified tasks

organizational personnel with information security responsibilities

Mechanisms implementing least privilege functions