This is a potential security issue, you are being redirected to https://csrc.nist.gov.
An ISCM capability that ensures that people have the privileges necessary (and only those necessary) to perform their duties, to limit access to that which is necessary.
NISTIR 8011 Vol. 1 under Capability, Privilege and Account Management
See Capability, Privilege and Account Management.
NISTIR 8011 Vol. 1