Compliancemanzill.com
NIST 800-53 rev.5

NIST 800-53 rev.5/Access Control/62 of 1011

AC-06 (01)Least Privilege | Authorize Access to Security Functions

Control family: Access Control

Control description

Authorize access for [Assignment: organization-defined individuals or roles] to:

(a) [Assignment: organization-defined security functions (deployed in hardware, software, and firmware)]; and

(b) [Assignment: organization-defined security-relevant information].

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.