Trace one authority signal through its exact source, normalized catalog, retained method context, and required human decision. The signal stops wherever the record stops.
1,196 catalog units indexedNormalized catalog · SHA-256 bfae171ee609…aaacbcc7.
04
Reference method
3,715 assessment-objective nodes retained · inactive2,931 method parts and 2,931 object parts are preserved for reference; no runnable test set is activated by this catalog reader.
05
Human acceptance
Required · no conclusion recordedThe reference method may prepare a review record. A named reviewer retains conclusion authority.
A later station can exist as configuration without inheriting the authority of an earlier one. Only a connected path carries provenance; only a named reviewer can accept a conclusion.
The server returns at most 50 records per view. Refine the source query or family to inspect the remainder; the full catalog is never shipped to a browser bundle.
Field notebook · source record
AC-6
Access Control
active
Least Privilege
The statement below is source material, not a generated control summary.
01
Source statement
Employ the principle of least privilege, allowing only authorized accesses for users (or processes acting on behalf of users) that are necessary to accomplish assigned organizational tasks.
02
Guidance
Organizations employ least privilege for specific duties and systems. The principle of least privilege is also applied to system processes, ensuring that the processes have access to systems and operate at privilege levels no higher than necessary to accomplish organizational missions or business functions. Organizations consider the creation of additional processes, roles, and accounts as necessary to achieve least privilege. Organizations apply least privilege to the development, implementation, and operation of organizational systems.
03
Organization-defined parameters
No organization-defined parameters on this unit.
04
Assessment reference context
Retained, not activated.1 source assessment records and 1 objective nodes are available as reference context. This surface runs none of them.
ac-6_objAC-061 objective nodes
the principle of least privilege is employed, allowing only authorized accesses for users (or processes acting on behalf of users) that are necessary to accomplish assigned organizational tasks.
05
Reference method and authority
InputExact release, source digest, control ID, and cited source fields
Agent taskPrepare a bounded evidence request or test-plan draft
Fail closedAbstain when source, scope, or assessment identity is missing
Human acceptanceA named reviewer decides whether evidence supports the conclusion