Administrative Access
What is Administrative Access?
Elevated system privileges that allow users to perform configuration changes, install software, and manage other user accounts on a system.
Terms that appear alongside administrative access
Each of these is named in at least one of the same controls as administrative access. The number is how many controls name both.
- authentication 10 shared controls
- access management 9 shared controls
- multi factor authentication 7 shared controls
- privileged access management 7 shared controls
- access control 6 shared controls
- encryption 4 shared controls
- role based access control 4 shared controls
- remote access 4 shared controls
Frameworks that govern administrative access
What the standards actually require on administrative access
Requirements naming administrative access across 6 standards, quoted from the control text.
All non-console administrative access must be encrypted with strong cryptography. The guidance explains the purpose (stopping an eavesdropper capturing administrator IDs, passwords and other authorization factors), gives out-of-band technologies such as lights...
2.2.7 · 2.2.7 Non-console administrative access encrypted →Third-party administrative access. Level 1 (a and b): privileged access for vendors restricted to need, and security requirements for supplier access agreed and documented.
mtcs-singapore::22.13 · Third party administrative access →Where supported, require MFA on every account with administrative access, on every enterprise asset, whether the asset is managed on site or by a third-party provider.
CIS-6.5 · Require MFA for Administrative Access →Require multi-factor authentication for all administrative access accounts on all enterprise assets where supported, whether the assets are run in house or by a service provider.
cis-controls-v8-1::6.5 · Require MFA for Administrative Access →Access to storage management should require strong authentication, multi-factor where the risk warrants (knowledge, possession and biometric factors, cryptographically derived credentials), individual accounts, role-based authorization with least privilege and...
iso-iec-27040-2024::10.4.2 · Authentication and authorization →Operations and management interfaces to 5G NFs must be authenticated, encrypted, and logged. Administrative access requires strong authentication, role separation, and privileged access management.
33.501-OAM · Management Plane Security →Questions people ask about administrative access
What is Administrative Access?
Why is Administrative Access important for compliance?
Which compliance frameworks address Administrative Access?
Where can I learn more about Administrative Access?
See how Administrative Access applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.