NIST SP 800-171 A.03.01.05: Least Privilege Assessment

Assess that the organization employs the principle of least privilege, allowing only authorized accesses for users and processes acting on behalf of users that are necessary to accomplish assigned organizational tasks.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Access Control Assessment

3.1.1 All security policies and operational procedures that are identified in Requirement 3 are: • Documented. • Kept up to date. • In use. • Known to all affected parties
3.1.2 Roles and responsibilities for performing activities in Requirement 3 are documented, assigned, and understood
3.1.20 External Connections Control
A.03.01.01 Account Management Assessment
A.03.01.12 Remote Access Assessment

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NIST SP 800-171 controls