MacZine
The MacTech Solutions Newsletter
Topic · 3 articles
Topic · 3 articles
Access Control
Every MacZine article on Access Control, newest first - written, reviewed and versioned in the open.
066Issue Nº
Separation of Duties With Ten People Is a Review, Not a Second Hire
NIST 800-171 3.1.4 asks a small contractor to separate duties it lacks the staff to split. The answer is named pairs, separate accounts and outside review.
064Issue Nº
3.9.2 Fails on the Transfer, Not the Termination
NIST 800-171 control 3.9.2 is worth 5 SPRS points. Firings are handled. The engineer who moved to a commercial program and kept enclave access is not.
025Issue Nº
3.5.3: The MFA Control Most Programs Think They Already Passed
NIST 800-171 3.5.3 requires MFA for three scopes, not one. Most programs cover network logins and miss privileged local access - the one assessors test first.