id: "CM-05(06)" title: "Limit Library Privileges" family: "CM" family_name: "Configuration Management" sort_id: "cm-05.06" priority: "P1" implementation_level: "system" parent: "CM-05" enhancement: True


Statement

Limit privileges to change software resident within software libraries.

Guidance

Software libraries include privileged programs.

Assessment Objective

privileges to change software resident within software libraries are limited.

Configuration management policy

procedures addressing access restrictions for changes to the system

configuration management plan

system design documentation

system architecture and configuration documentation

system configuration settings and associated documentation

system component inventory

change control records

system audit records

system security plan

other relevant documents or records

Organizational personnel with information security responsibilities

system/network administrators

Organizational processes for managing access restrictions to change

mechanisms supporting and/or implementing access restrictions for change