Various network outages have occurred recently due to unapproved changes to network and security devices. All changes were made using various system credentials. The security analyst has been tasked…

A user rights and permissions review audits which accounts have access to critical systems and ensures the principle of least privilege is enforced. Since the outages were caused by unauthorized changes made with system credentials, reviewing and restricting who holds those credentials directly addresses the root cause by limiting which users can make changes to network and security devices.

Configuration management tracks and controls device configuration states but does not address the underlying problem of too many users having credentials to make unauthorized changes.

Incident management defines how to respond after an event occurs and does not proactively reduce the number of users who can make unauthorized changes.

Implementing security controls on Layer 3 devices alone does not address the credential and access problem that allowed unauthorized changes to occur across multiple devices.