Sekit CSF · Identity & Access Management · Policy

RCF-0070Privileged access management

Administrator accounts are strictly controlled and separated from regular accounts

Mapping at a glance

RCF-0070Privileged access managementIdentity & Access Management · Policy

A.5.15Access controlISO/IEC 27001:2022 A.8.2Privileged access rightsISO/IEC 27001:2022 PR.AA-03Users and devices authenticatedNIST CSF 2.0 PR.AA-05Access permissions managedNIST CSF 2.0 CE4.2Control administrative privilegesCyber Essentials

RCF-0070 maps to 5 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.5.15Access controlsupportsKeeping administrative privileges in separate, approved, tracked accounts is A.5.15's least-privilege principle applied specifically to the accounts capable of the most damage.A.8.2Privileged access rightsenablesMandating separate dedicated admin accounts with management approval and a current register is the policy foundation A.8.2's privileged access control depends on.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

PR.AA-03Users and devices authenticated PR.AA-05Access permissions managed

Maps to Cyber Essentials

Curated mapping with the reasoning, not just the codes.

CE4.2Control administrative privileges

This topic through the other lenses

All Identity & Access Management controls

Ask Sekura: “What evidence proves RCF-0070?”

Also via MCP, free with account