AC.L2-3.1.22[b]

AC.L2-3.1.22[b] — Access Control (User Access Rights)

Domain: Access Control (AC)  |  Practice: AC.L2-3.1.22  |  Objective ID: 3.1.22[b]  |  Source: NIST SP 800-171 Rev. 2 / CMMC 2.0 Level 2

Assessment Objective:

Access is limited to the minimum necessary to perform assigned duties.