PR.AC-5: Identity Management, Authentication and Access Control
Network integrity is protected (e.g., network segregation, network segmentation).
PR.AC-4: Identity Management, Authentication and Access Control
Access permissions and authorizations are managed, incorporating the principles of least privilege and separation of duties.
PR.AC-2: Identity Management, Authentication and Access Control
Physical access to assets is managed and protected.
PR.AC-1: Identity Management, Authentication and Access Control
Identities and credentials are issued, managed, verified, revoked, and audited for authorized devices, users, and processes.