Privileged Access Control Support for NISPOM Compliance
The NISP Operating Manual (NISPOM) prescribes the requirements, restrictions, and other safeguards necessary to prevent unauthorized disclosure of classified information by US Government Executive Branch departments and agencies. NISPOM Chapter 8 addresses information-system security procedures and requirements.
This white paper explains how to address the threat of insider attacks through delegating user privileges, documenting segregation of duties, implementing least privilege access controls and audit logs, and establishing centralized operations across heterogeneous Unix/Linux environments.
Includes:
- Sample scripts
- Compliance logs
- Appendices mapping product functionalities to the NISPOM auditor's checklist
