id: "CM-05(06)" title: "Limit Library Privileges" family: "CM" family_name: "Configuration Management" sort_id: "cm-05.06" priority: "P1" implementation_level: "system" parent: "CM-05" enhancement: True
Statement
Limit privileges to change software resident within software libraries.
Guidance
Software libraries include privileged programs.
Assessment Objective
privileges to change software resident within software libraries are limited.
Configuration management policy
procedures addressing access restrictions for changes to the system
configuration management plan
system design documentation
system architecture and configuration documentation
system configuration settings and associated documentation
system component inventory
change control records
system audit records
system security plan
other relevant documents or records
Organizational personnel with information security responsibilities
system/network administrators
Organizational processes for managing access restrictions to change
mechanisms supporting and/or implementing access restrictions for change