12.8: Establish and Maintain Dedicated Computing Resources for All Administrative Work
CSF v1.1 References:
PF v1.0 References:
Threats Addressed:
Group:
Incorporates the following controls from the previous version: 4.6: Use Dedicated Workstations For All Administrative Tasks, 11.6: Use Dedicated Machines For All Network Administrative Tasks, 11.7: Manage Network Infrastructure Through a Dedicated Network.
Control Statement
Establish and maintain dedicated computing resources, either physically or logically separated, for all administrative tasks or tasks requiring administrative access. The computing resources should be segmented from the enterprise's primary network and not be allowed internet access.
[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]