3.1.6 Accessing Non-Security Functions

3.1.6 Use non-privileged accounts or roles when accessing non-security functions.

To go back to the NIST 800-171 Controls page click here.

Guides

• SANS Institute Implementing Least Privilege in an SMB

Example Tools

• Lieberman
• Cyberark

Sample Policy & Procedures

• State of Arizona – Access Control Policy Template

Additional Lessons Learned

• LMBC – Information Security – Are your administrators using admin accounts for everything?

Videos

• BrightTALK – Target and Eliminate Privileged Account Security Threats
• BrightTALK – Anger, Greed and a Few Mistakes: Human Nature and Privileged Accounts
• BrightTALK – Simply Indispensable Privileged Account Management & Endpoint Security
• BrightTALK – Global State of Privileged Account Management

Vendor Documentation

• CyberArk Privileged Account Security Solution