New Zealand Information Security Manual (NZISM)
Chapter 16: Authentication and Access Controls – New Zealand Information Security Manual (NZISM)

New Zealand Information Security Manual (NZISM) 16.5.11.C.02: Avoid remote privileged access from untrusted domains

What does 16.5.11.C.02 require?

Agencies should not permit remote privileged access originating from an untrusted domain, and that includes signing in as an ordinary user and then elevating privileges.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Chapter 16: Authentication and Access Controls – New Zealand Information Security Manual (NZISM)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.