Australian Energy Sector Cyber Security Framework (AESCSF)
Identity and access management (ACCESS) – Australian Energy Sector Cyber Security Framework (AESCSF)

Australian Energy Sector Cyber Security Framework (AESCSF) ACCESS-2d: Least privilege built into logical access rules

What does ACCESS-2d require?

Logical access requirements apply the principle of least privilege, limiting each user to the privileges needed for assigned tasks and nothing more.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Identity and access management (ACCESS) – Australian Energy Sector Cyber Security Framework (AESCSF)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.