What is CMMC 2.0 L2 AC.L2-3.1.5?

CMMC 2.0 L2 AC.L2-3.1.5 (Least Privilege) requires: Employ least privilege, including for privileged accounts. This is a high-severity control.

How does EchelonGraph detect CMMC 2.0 L2 AC.L2-3.1.5 violations?

EchelonGraph maps CMMC 2.0 L2 AC.L2-3.1.5 requirements to automated cloud security scans. Compliance scoring reflects the status of this control across all connected cloud accounts.

🛡️CMMC 2.0 L2 AC.L2-3.1.5high

Least Privilege

Description

Employ least privilege, including for privileged accounts.

⚠️ Risk Impact

Over-privilege expands CUI exposure on any compromise.

🔧 Remediation

Right-size roles; remove wildcard grants.

🔗 Cross-Framework References

NIST 800-171 3.1.5

Automate CMMC 2.0 L2 AC.L2-3.1.5 compliance

EchelonGraph continuously monitors this control across all your cloud accounts.

Start Free →