CMMC 2.0 • LEVEL 2 • ACCESS CONTROL

AC.L2-3.1.6 — Least Privilege – Privileged Accounts

Restrict privileged accounts on the system to all administrative functions including system configuration changes, user account management, audit log access, software installation, and security tool managementCMMC/STIG.. Require that users (or roles) with privileged accounts use non-privileged accounts when accessing non-security functions or non-security information.