Privileged Account
What is Privileged Account?
A user account with elevated permissions that provide administrative control over systems, databases, networks, or security configurations.
Frameworks that govern privileged account
What the standards actually require on privileged account
Requirements naming privileged account across 6 standards, quoted from the control text.
Require staff holding privileged accounts to use a non privileged account or role when performing work that does not need elevated rights.
AC.L2-3.1.6 · Non-Privileged Account Use →Identification and Authentication (organizational Users) | Access to Accounts , separate Device. Implement multi-factor authentication for [Selection (one or more): local; network; remote] access to [Selection (one or more): privileged accounts;
IA-2(6) · Identification and Authentication (organizational Users) | Access to Accounts , separate Device. Implement multi-factor authentication for [Selection (one or more): local; network; remote] access to [Selection (one or more): privileged accounts; non-privileged accounts] such that: →Identification and Authentication (organizational Users) | Access to Accounts , separate Device. Implement multi-factor authentication for [Selection (one or more): local; network; remote] access to [Selection (one or more): privileged accounts;
IA-2(6) · Identification and Authentication (organizational Users) | Access to Accounts , separate Device. Implement multi-factor authentication for [Selection (one or more): local; network; remote] access to [Selection (one or more): privileged accounts; non-privileged accounts] such that: →Restrict privileged accounts to designated personnel; require non-privileged accounts for non-security functions.
03.01.06 · Least Privilege - Privileged Accounts →Privileged users must use separate accounts for administrative tasks and not for daily activities like email or browsing.
CPG-1.E · Separating User and Privileged Accounts →Tightly control administrator level operating system accounts on SWIFT components, with named ownership, strong authentication, and full activity logging.
CSCF-1.2 · Operating System Privileged Account Control →Questions people ask about privileged account
What is Privileged Account?
Why is Privileged Account important for compliance?
Which compliance frameworks address Privileged Account?
Where can I learn more about Privileged Account?
See how Privileged Account applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.