Establish and maintain a user and administrator privileges management metrics program.

UCF ID: 02076

Control Type: Actionable Reports or measurements

Status: Live

Supporting and supported controls

This control directly supports:

Establish and maintain a technical measurement metrics policy. [UCF Control ID 01655]

This control has the following supporting controls:

Report on the percentage of active computer accounts that have been reviewed for justification of current access privileges in accordance with policy. [UCF Control ID 02094]

Report on the percentage of systems where permission to install non-standard software is limited in accordance with policy. [UCF Control ID 02095]

Report on the percentage of systems and applications where assignment of user and administration privileges is in compliance with the policy that specifies role-based information access privileges. [UCF Control ID 02096]

Authority documents complied with:

CISWG Information Security Program Elements, January 10,2005, ISPE20

US Federal Security Guidance

The organization must establish and maintain a user and administrator privileges metrics management program [ISPE20, CISWG Information Security Program Elements, January 10,2005]