graphgrc

SCF - IAC-16.1 - Privileged Account Inventories

Mechanisms exist to inventory all privileged accounts and validate that each person with elevated privileges is authorized by the appropriate level of organizational management.

Mapped framework controls

ISO 27002

Control questions

Does the organization inventory all privileged accounts and validate that each person with elevated privileges is authorized by the appropriate level of organizational management?