IAC-20
Access Enforcement
Description
Mechanisms exist to enforce Logical Access Control (LAC) permissions that conform to the principle of "least privilege."
Control Question
Does the organization enforce Logical Access Control (LAC) permissions that conform to the principle of "least privilege?"
Control Metadata
Domain:
Identification & Authentication
Validation Cadence:
Annual