ComplianceNIST 800-53 enhancement

NIST-SC-7(15) Networked Privileged Accesses

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
SC System and Communications Protection
Control
SC-7(15)

Control statement

Route networked, privileged accesses through a dedicated, managed interface for purposes of access control and auditing.

Discussion

Privileged access provides greater accessibility to system functions, including security functions. Adversaries attempt to gain privileged access to systems through remote access to cause adverse mission or business impacts, such as by exfiltrating information or bringing down a critical system capability. Routing networked, privileged access requests through a dedicated, managed interface further restricts privileged access for increased access control and auditing.

Related

Enhancement of · Compliance (1)

  • NIST-SC-7 Boundary Protection NIST 800-53 control

Related control · Compliance (4)

  • NIST-AC-2 Account Management NIST 800-53 control
  • NIST-AC-3 Access Enforcement NIST 800-53 control
  • NIST-AU-2 Event Logging NIST 800-53 control
  • NIST-SI-4 System Monitoring NIST 800-53 control