ARCHETYPAL
CGRCC / requirement

03.01.07(a)

REQ-8bbce8d6e53152dac69c · LEGACY_INTERPRETATION · source version 2cb0e43635265660

Organization should prevent nonprivileged execution of privileged functions

Meaning & implementation context

Catalog material requires organizational applicability review. Reported support, approval and maturity are statements from the source, not current enforcement verification.

Source Id
nist-800-171-r3
Control
03.01.07(a)
Source Version
SP 800-171 Rev.3
Url
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-171r3.pdf#page=21
Actor
Organization
Modality
should
Action
prevent
Object
nonprivileged execution of privileged functions
Condition
Within the source scope; assess applicability before adoption.
Exception
Not recorded
Timing
Not recorded
Authority
technical-requirements-when-incorporated
Jurisdiction
United States
Checked At
2026-09-28
Status
interpretation-needs-review
Examples
{ "meetsRule": "Organization follows the recommendation to \"prevent\" for nonprivileged execution of privileged functions within these conditions: Within the source scope; assess applicability before adoption..", "doesNotMeetRule": "Organization omits the recommended action \"prevent\" for nonprivileged execution of privileged functions. This is a recommendation gap, not by itself a statutory violation.", "outOfScope": "The actor, activity, jurisdiction, or applicability conditions in this source variant do not match." }

Source-reported relationships

1 associations retained with their original context.

SUPPORTED BY SOURCE REQUIREMENT · AIR-2711651405@ad3986b7b3466500

SOURCE_REPORTED_REVIEW_REQUIRED

{
  "sourceKey": "nist-800-171-r3@2eb9b17a4b7e",
  "locator": "03.01.07(a)"
}
Inspect target record ↗

Owner interpretation review

Append a catalog review decision. The source record remains immutable.

Owner sign-in

Versioned CGRCC JSON
{
  "key": "REQ-8bbce8d6e53152dac69c@2cb0e43635265660",
  "id": "REQ-8bbce8d6e53152dac69c",
  "version": "2cb0e43635265660",
  "kind": "requirement",
  "lifecycle": "LEGACY_INTERPRETATION",
  "title": "03.01.07(a)",
  "statement": "Organization should prevent nonprivileged execution of privileged functions",
  "family": "Governance",
  "body": {
    "sourceId": "nist-800-171-r3",
    "control": "03.01.07(a)",
    "sourceVersion": "SP 800-171 Rev.3",
    "url": "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-171r3.pdf#page=21",
    "actor": "Organization",
    "modality": "should",
    "action": "prevent",
    "object": "nonprivileged execution of privileged functions",
    "condition": "Within the source scope; assess applicability before adoption.",
    "exception": null,
    "timing": null,
    "authority": "technical-requirements-when-incorporated",
    "jurisdiction": "United States",
    "checkedAt": "2026-09-28",
    "status": "interpretation-needs-review",
    "examples": {
      "meetsRule": "Organization follows the recommendation to \"prevent\" for nonprivileged execution of privileged functions within these conditions: Within the source scope; assess applicability before adoption..",
      "doesNotMeetRule": "Organization omits the recommended action \"prevent\" for nonprivileged execution of privileged functions. This is a recommendation gap, not by itself a statutory violation.",
      "outOfScope": "The actor, activity, jurisdiction, or applicability conditions in this source variant do not match."
    }
  },
  "versions": [
    {
      "version": "2cb0e43635265660",
      "key": "REQ-8bbce8d6e53152dac69c@2cb0e43635265660"
    }
  ],
  "provenance": [],
  "relationships": [
    {
      "id": "MAP-4a13185160cb061728023bf8",
      "from": "AIR-2711651405@ad3986b7b3466500",
      "to": "REQ-8bbce8d6e53152dac69c@2cb0e43635265660",
      "kind": "SUPPORTED_BY_SOURCE_REQUIREMENT",
      "status": "SOURCE_REPORTED_REVIEW_REQUIRED",
      "body": {
        "sourceKey": "nist-800-171-r3@2eb9b17a4b7e",
        "locator": "03.01.07(a)"
      },
      "fromKeys": [
        "AIR-2711651405@ad3986b7b3466500"
      ],
      "toKeys": [
        "REQ-8bbce8d6e53152dac69c@2cb0e43635265660"
      ],
      "resolution": "RESOLVED_REFERENCE_REVIEW_REQUIRED"
    }
  ]
}
Back to CGRCC Registry