AC-6(4)

Requirement

Provide separate processing domains to enable finer-grained allocation of user privileges.

Discussion

Providing separate processing domains for finer-grained allocation of user privileges includes using virtualization techniques to permit additional user privileges within a virtual machine while restricting privileges to other virtual machines or to the underlying physical machine, implementing separate physical domains, and employing hardware or software domain separation mechanisms.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Access control policy; procedures addressing least privilege; system design documentation; system configuration settings and associated documentation; system audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with responsibilities for defining least privileges necessary to accomplish specified tasks; organizational personnel with information security responsibilities; system developers].

ID	Assessment Objectives
AC-06(04)	separate processing domains are provided to enable finer-grain allocation of user privileges.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!