IAM Security
Executive Dashboard
Frameworks
Frameworks
Controls
Domains
Risks
Patterns
Mappings
Catalogs
Asset Inventory
Threat Sources
Threat Events
Vulnerabilities
Assessments
Framework Intelligence
Framework Intelligence
Benchmark
Executive Reports
Administration
Users
Profiles
APIs & MCPs
Access to Frameworks
Configurações de IA
Languages
Translations
Data Translations
Risk Analysis
Dashboard
D3 Visualizations
FAIR Analysis
English
Português
English
Español
Sign out
Security Controls
Edit Control
Edit Control
Configure os detalhes do controle de segurança
Basic Information
Domain *
Select a domain...
Authentication (AUTH)
Identity Lifecycle (JML) (JML)
Monitoring (MON) (MON)
Privileged Access (PAM) (PAM)
Control ID *
ID will be generated automatically when selecting the domain
Description *
Remove local administrator account and use LAPS for unique, per-workstation rotated passwords.
Assessment Question
How is the Local Administrator password of workstations managed?
Technical Justification
Prevents lateral movement via shared hash/password.
Suggested Evidence
Weight
Compliance Mappings
Suggest with AI
ISO 27001:2022
NIST CSF 2.0
CIS Controls v8
LGPD/GDPR
IBGC 6ª Edição
PSI-CORP-001
ISF SGP 2024
Gartner IGA Maturity Model
Gartner IGA Program Guidance
IDPro Body of Knowledge
ITIL 4 / ITSM
COBIT 2019
CSA Cloud Controls Matrix v4
ISO/IEC 27035
NIST SP 800-53
NIST SP 800-63
ANTT - Regulamentação
Microsoft AD/M365 Best Practices
AI Suggestions
Associated Risks
Suggest with AI
16
Movimentação Lateral via Admin Local
operational
AI-Suggested Risks
Maturity Levels
1
Level 1
Single identical password (Shared).
2
Level 2
Different passwords (Excel/KeePass).
3
Level 3
LAPS deployed on part of the fleet.
4
Level 4
LAPS at 100% with usage auditing.
5
Level 5
LAPS (Cloud/Intune) automatic rotation after use.
Save Control
Cancel
Confirm
Are you sure?
Warning
Message
Import Data
Data Type
Controls
Domains
Risks
Compliance Standards
File (CSV or Excel)
Existing records will be updated. New records will be created.