Standard:
YALE-MSS-9.4: Grant privileges to IT Systems and data according to the principle of least privilege
YALE-MSS-9.4.1: Review all accounts with access to the system to ensure least privilege is applied
Low Risk Endpoint
Required
Moderate Risk Endpoint
Required
High Risk Endpoint
Required
Low Risk Server
Required
Moderate Risk Server
Required
High Risk Server
Required
Low Risk Mobile Device
Required
Moderate Risk Mobile Device
Required
High Risk Mobile Device
Required
Low Risk Network Printer
Required
Moderate Risk Network Printer
Required
High Risk Network Printer
Required
Details
Review all accounts with access to the system and what access (entitlements) they have. Ensure the principle of least privilege is applied to all accounts. Perform this review on a regular basis.