Access Control Policy
Number:
SEC-06 was 141.10 (6.1)
Purpose
Access control strengthens IT security and by aligning the business need with the technical privileges given, minimizing impacts of any security breaches. The Access Control Policy requires agencies to exercise principles of least privilege when providing system access, and management of user accounts on system components.