graphgrc

SCF - END-03 - Prohibit Installation Without Privileged Status

Automated mechanisms exist to prohibit software installations without explicitly assigned privileged status.

Mapped framework controls

ISO 27002

NIST 800-53

Control questions

Does the organization use automated mechanisms to prohibit software installations without explicitly assigned privileged status?