OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/GLBA Safeguards Rule (16 CFR 314)/314.4

314.4(c)(1)(i)

paragraph (action item)

Authenticate and permit access only to authorized users to protect against the unauthorized acquisition of customer information; and

314.4 Elements.

Related Frameworks

4 mappings across 5 frameworks
SCF4 mappings
DCH-01Data Protection
1.00
IAC-01Identity & Access Management (IAM)
1.00
IAC-20Access Enforcement
1.00
IAC-21Least Privilege
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AC-10Concurrent Session Control
1.00
AC-16Security and Privacy Attributes
1.00
AC-17Remote Access
1.00
AC-18Wireless Access
1.00
AC-19Access Control for Mobile Devices
1.00
AC-2Account Management
1.00
AC-2(12)Account Monitoring for Atypical Usage
1.00
AC-20(5)Portable Storage Devices — Prohibited Use
1.00
AC-24Access Control Decisions
1.00

+90 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (33) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.1.1
1.00
3.1.16
1.00
3.1.18
1.00
3.1.2
1.00
3.1.3
1.00
3.1.4
1.00
3.1.5
1.00
3.12.1
1.00
3.12.2
1.00
3.12.3
1.00

+23 more (top 10 by confidence shown)

CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-000001
1.00
CCI-000002
1.00
CCI-000003
1.00
CCI-000004
1.00
CCI-000005
1.00
CCI-000006
1.00
CCI-000421
1.00
CCI-000422
1.00
CCI-000423
1.00
CCI-000424
1.00

+90 more (top 10 by confidence shown)

STIG0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

SV-256877r958482_ruleIndividual user accounts with passwords must be maintained for the Hardware Management Console operating system and application.
1.00
SV-104181r1_ruleSymantec ProxySG must implement security policies that enforce approved authorizations for logical access to information and system resources by employing identity-based, role-based, and/or attribute-based security policies.
0.50
SV-104485r1_ruleSymantec ProxySG must be configured to enforce user authorization to implement least privilege.
0.50
SV-104487r1_ruleSymantec ProxySG must configure Web Management Console access restrictions to authorized IP address/ranges.
0.50
SV-202017r960792_ruleThe network device must be configured to assign appropriate user roles or access levels to authenticated users.
0.50
SV-205663r1106629_ruleWindows Server 2019 local volumes must use a format that supports NTFS attributes.
0.50
SV-205664r958472_ruleWindows Server 2019 non-administrative accounts or groups must only have print permissions on printer shares.
0.50
SV-205665r958472_ruleWindows Server 2019 Access this computer from the network user right must only be assigned to the Administrators, Authenticated Users, and Enterprise Domain Controllers groups on domain controllers.
0.50
SV-205666r958472_ruleWindows Server 2019 Allow log on through Remote Desktop Services user right must only be assigned to the Administrators group on domain controllers.
0.50
SV-205667r958472_ruleWindows Server 2019 Deny access to this computer from the network user right on domain controllers must be configured to prevent unauthenticated access.
0.50

+90 more (top 10 by confidence shown)

Federal Trade Commission, Standards for Safeguarding Customer Information (GLBA Safeguards Rule). Edition dated 2026-01-01. Read the publication.