| Text of Recommendation | Implement system access authorization processes for Splunk administrators to include separation of duties controls. When separation of duties cannot be achieved for conflicting roles, assess the risk and document the control deviation and risk-based decisions.
|
|---|---|
| Recommendation Number | 2A |
| Recommendation Status | Open |
| Significant Recommendation | No |
| Submitting OIG | |
|---|---|
| Linked Report |