History

Priority

recommended

Nov 2018

Removed

Removed due to being covered by more recent secure administration security controls.

2017

Agencies must conduct the remote administration of systems, including the use of privilegedaccounts, over a secure communications medium from secure devices.

2015

Agencies must conduct the remote administration of systems, including the use of privilegedaccounts, over a secure communications medium from secure devices.

2010

It is recommended that agencies do not allow the use of privileged access remotely, including logging in asan unprivileged system user and then escalating privileges.