This is a potential security issue, you are being redirected to https://csrc.nist.gov
An ISCM capability that ensures that people have the privileges necessary (and only those necessary) to perform their duties, to limit access to that which is necessary.
NISTIR 8011 Vol. 1 under Capability, Privilege and Account Management
See Capability, Privilege and Account Management.
NISTIR 8011 Vol. 1