NIST 800-53 Rev 5
424 controls available
SI-4(20)high
Privileged Users
System and Information Integrity
Control Statement
Implement the following additional monitoring of privileged users: {{ insert: param, si-04.20_odp }}.
Discussion
Privileged users have access to more sensitive information, including security-related information, than the general user population. Access to such information means that privileged users can potentially do greater damage to systems and organizations than non-privileged users. Therefore, implementing additional monitoring on privileged users helps to ensure that organizations can identify malicious activity at the earliest possible time and take appropriate actions.
- Framework
- NIST SP 800-53 Rev 5
- Family
- System and Information Integrity
- Baselines
- high
Related Frameworks
3 paths across 2 frameworks
Related Frameworks
SCF1 mapping
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
CCI2 mappings
CCI-002676
1.00
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-002677
1.00
- DISA · 2025-01-23 · disa_cci_list · equivalent
Related STIGs
40 STIGs reach this control through 90 CCIs. Expand a row to see the responsible NICE and O*NET roles.
Operating System - Server
1 STIG
Operating System - Server
1 STIGHPE 3PAR SSMC Operating System Security Technical Implementation Guide
V2R12024-08-271 of 14 findings match
M1
Network Device
21 STIGs
Network Device
21 STIGsApplication Layer Gateway Security Requirements Guide
22024-12-0412 of 155 findings match
M12
Application Layer Gateway Security Requirements Guide
V2R32025-09-1512 of 160 findings match
M12
IBM DataPower ALG Security Technical Implementation Guide
V1R12016-01-2111 of 65 findings match
M10L1
Palo Alto Networks ALG Security Technical Implementation Guide
V3R42025-03-1211 of 50 findings match
M10L1
Palo Alto Networks IDPS Security Technical Implementation Guide
V3R22024-12-1911 of 29 findings match
M11
Symantec ProxySG ALG Security Technical Implementation Guide
V1R32020-03-278 of 66 findings match
M8
Cisco ASA IPS Security Technical Implementation Guide
V2R12024-08-276 of 23 findings match
M6
Trend Micro TippingPoint IDPS Security Technical Implementation Guide
V2R22024-09-166 of 30 findings match
M6
Show 13 more STIGs in this category →Hide additional STIGs
Akamai KSD Service Impact Level 2 ALG Security Technical Implementation Guide
V1R12017-09-155 of 33 findings match
M4L1
Juniper SRX Services Gateway ALG Security Technical Implementation Guide
V3R32024-12-195 of 24 findings match
H2M3
Juniper SRX Services Gateway IDPS Security Technical Implementation Guide
V2R12024-06-103 of 28 findings match
M3
F5 BIG-IP TMOS ALG Security Technical Implementation Guide
V1R22025-06-092 of 37 findings match
M2
Cisco ASA Firewall Security Technical Implementation Guide
V2R12024-06-061 of 21 findings match
M1
F5 BIG-IP TMOS Firewall Security Technical Implementation Guide
V1R12024-09-091 of 14 findings match
L1
Firewall Security Requirements Guide
32024-12-041 of 34 findings match
L1
Firewall Security Requirements Guide
V3R32025-09-221 of 35 findings match
L1
Fortinet FortiGate Firewall Security Technical Implementation Guide
12022-09-121 of 29 findings match
L1
Fortinet FortiGate Firewall Security Technical Implementation Guide
V1R42025-11-191 of 29 findings match
L1
HPE Aruba Networking AOS Wireless Security Technical Implementation Guide
V1R22026-02-251 of 14 findings match
M1
Network WLAN AP-IG Platform Security Technical Implementation Guide
V7R32023-02-131 of 9 findings match
L1
Network WLAN AP-NIPR Platform Security Technical Implementation Guide
V7R32023-02-131 of 11 findings match
M1
Web / Application Server
3 STIGs
Web / Application Server
3 STIGsApplication Security and Development Security Technical Implementation Guide
62025-02-121 of 286 findings match
M1
Application Security and Development Security Technical Implementation Guide
V6R42025-09-091 of 286 findings match
M1
Application Server Security Requirements Guide
V4R42025-09-101 of 137 findings match
M1
Virtualization / Container
3 STIGs
Virtualization / Container
3 STIGsKubernetes Security Technical Implementation Guide
22025-05-161 of 94 findings match
M1
VMware NSX-T Distributed Firewall Security Technical Implementation Guide
V1R32023-06-231 of 7 findings match
M1
VMware NSX-T Tier 1 Gateway Firewall Security Technical Implementation Guide
V1R32023-06-221 of 9 findings match
M1
Cloud / Identity Service
1 STIG
Cloud / Identity Service
1 STIGCloud Computing Mission Owner Network Security Requirements Guide
V1R22024-12-203 of 9 findings match
H1M2
Endpoint Security Management
6 STIGs
Endpoint Security Management
6 STIGsIntrusion Detection and Prevention Systems Security Requirements Guide
V3R42025-09-2213 of 60 findings match
M13
Intrusion Detection and Prevention Systems Security Requirements Guide
32025-05-1912 of 58 findings match
M12
Dragos Platform 2.x Security Technical Implementation Guide
12025-05-151 of 19 findings match
M1
Dragos Platform 2.x Security Technical Implementation Guide
V1R62026-02-181 of 19 findings match
M1
Tanium 7.x Application on TanOS Security Technical Implementation Guide
V2R22025-02-111 of 75 findings match
M1
Tanium 7.x Security Technical Implementation Guide
V2R32025-05-141 of 98 findings match
M1
Uncategorized
5 STIGs
Uncategorized
5 STIGsApplication Layer Gateway Security Requirements Guide
V2R42026-05-2312 of 160 findings match
M12
F5 BIG-IP TMOS ALG Security Technical Implementation Guide
V1R32026-06-032 of 37 findings match
M2
Application Server Security Requirements Guide
V4R52026-06-291 of 137 findings match
M1
Firewall Security Requirements Guide
V3R42026-05-231 of 35 findings match
L1
SDN Using NV Security Technical Implementation Guide
12017-03-011 of 25 findings match
M1