Under active development — Content is continuously updated and improved

IAC-21—Least Privilege

Weight: 10

>Control Description

Mechanisms exist to utilize the concept of least privilege, allowing only authorized access to processes necessary to accomplish assigned tasks in accordance with organizational business functions.

>Cross-Framework Mappings

NIST SP 800-53 r5

NIST CSF 2.0

CIS Controls v8

SOC 2 TSC

CMMC v2.0

NIST SP 800-171

FedRAMP Rev 5

OSFI B-13

Australia Essential Eight

India SEBI Guidelines

EU CRA Annexes

Annex 1.1(3)(e)

EU DORA

Saudi Arabia IoT Guidelines

Spain ENS

UK DEF STAN 05-138

SOC 2 TSC (Detailed)

CIS Controls v8.1 (Detailed)

GovRAMP

IEC TR 60601-4-5

ISO 27002:2022

NIST SP 800-161

NIST SP 800-171A Rev 3

NIST SP 800-171A

NIST SP 800-207 Zero Trust

SPARTA

TISAX

Data Privacy Management Principles

FBI CJIS

DHS TIC 3.0

DoD Zero Trust Roadmap

GLBA (16 CFR 314)

HIPAA Simplification 2013

§ 164.308(a)(3)(i)

§ 164.312(a)(1)

NY DFS 23 NYCRR 500

Ask AI

Configure your API key to use AI features.