SekitCrosswalk
ENES
Start now
Sekit CSF · Endpoint Security · Technical

RCF-0168Local admin control

Technical controls prevent users from running with local administrator privileges without approval

Mapping at a glance
RCF-0168Local admin controlEndpoint Security · Technical
A.8.2Privileged access rightsISO/IEC 27001:2022PR.AA-03Users and devices authenticatedNIST CSF 2.0PR.AA-05Access permissions managedNIST CSF 2.0CE4.2Control administrative privilegesCyber Essentials

RCF-0168 maps to 4 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.8.2Privileged access rightssupportsEnforcing standard-user sessions technically, so gaining admin rights requires separate approved credentials, is the mechanism that makes A.8.2's local admin restriction stick in practice.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

PR.AA-03Users and devices authenticatedPR.AA-05Access permissions managed

Maps to Cyber Essentials

Curated mapping with the reasoning, not just the codes.

CE4.2Control administrative privileges

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Local admin and removable-media controls
The rules on who may have administrator rights on their own device and on the use of USB sticks and external drives.
From the Sekit evidence catalog

This topic through the other lenses

RCF-0166 PolicyRCF-0167 Process

All Endpoint Security controls

Endpoint Security
Ask Sekura: “What evidence proves RCF-0168?”
Also via MCP, free with account