graphgrc

SCF - IAC-20 - Access Enforcement

Mechanisms exist to enforce Logical Access Control (LAC) permissions that conform to the principle of “least privilege.”

Mapped framework controls

ISO 27002

NIST 800-53

SOC 2

Control questions

Does the organization enforce Logical Access Control (LAC) permissions that conform to the principle of “least privilege?”