← Back to catalog
CM-5(5)
Privilege Limitation for Production and Operation
Configuration Management (CM)
Baselines
Low · Not includedModerate · Not includedHigh · Not included
Description
Limit privileges to change system components and system-related information within a production or operational environment; and Review and reevaluate privileges [assignment].
Discussion
In many organizations, systems support multiple mission and business functions. Limiting privileges to change system components with respect to operational systems is necessary because changes to a system component may have far-reaching effects on mission and business processes supported by the system. The relationships between systems and mission/business processes are, in some cases, unknown to developers. System-related information includes operational procedures.
Implementation guidance
No content available.
CSF 2.0 crosswalk
No CSF mappings exist for this control.