CM-05(05)—Access Restrictions for Change | Privilege Limitation for Production and Operation
Moderate
Core Control
>Control Description
(a) Limit privileges to change system components and system-related information within a production or operational environment; and
(b) Review and reevaluate privileges ⚙organization-defined frequency.
>Discussion
In many organizations, systems support multiple mission and business functions. Limiting privileges to change system components with respect to operational systems is necessary because changes to a system component may have far-reaching effects on mission and business processes supported by the system. The relationships between systems and mission/business processes are, in some cases, unknown to developers.
System-related information includes operational procedures.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.