BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

RA-05(05) Privileged Access

NIST SP 800-53 (controls) 5.2.0 against 5.1.1+u4
All changes in this version
unchanged RA Moderate baselineHigh baseline part of RA-5

Title

Privileged Access

Control

Implement privileged access authorization to [Assignment: system components] for [Assignment: vulnerability scanning activities].

Discussion

In certain situations, the nature of the vulnerability scanning may be more intrusive, or the system component that is the subject of the scanning may contain classified or controlled unclassified information, such as personally identifiable information. Privileged access authorization to selected system components facilitates more thorough vulnerability scanning and protects the sensitive nature of such scanning.

Parameters

ra-05.05_odp.01: system components
ra-05.05_odp.02: vulnerability scanning activities

Assessment objective

RA-05(05) privileged access authorization is implemented to [Assignment: system components] for [Assignment: vulnerability scanning activities].

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).