IAC-20.5: Dual Authorization for Privileged Commands

IAC-20.5 · Dual Authorization for Privileged Commands

Control Description

Automated mechanisms exist to enforce dual authorization for privileged commands.

Control Question

Assessment question for control validation

Does the organization use automated mechanisms to enforce dual authorization for privileged commands?

Control Weighting

Validation Cadence

Quarterly

NIST CSF Function

Protect

Supply Chain Risk Management (SCRM) Tiers

Applicable SCRM tier levels for this control

Tier 3 - Tactical

Core Control Designations

Special designations and baseline inclusions

ESP Level 3: IAC-20.5