{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"cyber_security","domain":["Secure Development (SDLC) & Application Security","Secure Configuration & Change Management"],"inherent_rating":"high","taxonomy":["iso-27005-vulnerability"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Asdlc-insecure-privileged-apps","description":"Applications or services running under privileged accounts, opening unnecessary network connections, or lacking secure-by-design architecture mean a single compromise grants broad system access and expands attack surface.","details":{"category":"cyber_security","impact":"high","inherent_rating":"high","likelihood":"medium","risk_id":"sdlc-insecure-privileged-apps","taxonomies":["iso-27005-vulnerability"],"treatment":"mitigate"},"id":"risk:sdlc-insecure-privileged-apps","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Asdlc-insecure-privileged-apps","sourceIds":["aiuc-1","cobit-2019","eu-ai-act","gdpr","iso-27001","nist-800-53","nist-csf-2","pci-dss","sox"],"sourceUrl":null,"title":"Applications running with excessive privilege / insecure design","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1f597adee11566683f4ec900668ec179a0395512d1793db5c5598964451e9c5a","properties":{"rationale":"Approving authentication/authorization requirements up front constrains later designs away from excessive privilege.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-03-5de4daf8.json","sourceId":"uc:UC-SDLC-03","targetDetailPath":"/data/v1/records/risk-sdlc-insecure-privileged-apps-ce55ff82.json","targetId":"risk:sdlc-insecure-privileged-apps","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8a1bedef1aaa9b750d6d6bf268da2b0d3ff78a02e84946ef8bb3957f919e4f0f","properties":{"rationale":"Engineering security from design onward with secure-coding standards is the secure-by-design defense against insecurely designed, over-privileged applications.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-config-04-ed033b30.json","sourceId":"uc:UC-CONFIG-04","targetDetailPath":"/data/v1/records/risk-sdlc-insecure-privileged-apps-ce55ff82.json","targetId":"risk:sdlc-insecure-privileged-apps","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:9683bcf5378e8188dbccb5dc53d801548b9a4154d44d00a4e5fd895272adfad2","properties":{"rationale":"Least privilege, isolation of execution domains and attack-surface minimization directly prevent over-privileged, broadly-exposed applications.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-04-ee9d76b1.json","sourceId":"uc:UC-SDLC-04","targetDetailPath":"/data/v1/records/risk-sdlc-insecure-privileged-apps-ce55ff82.json","targetId":"risk:sdlc-insecure-privileged-apps","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a65cb072c7f39c03229a3bab191d47560f0ab1b1042087e0a796d66348d86ffa","properties":{"rationale":"Secure-by-design activities embedded in the lifecycle contribute to eliminating insecure/over-privileged designs, though architecture (UC-04) is the operative control.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-01-b3583fd1.json","sourceId":"uc:UC-SDLC-01","targetDetailPath":"/data/v1/records/risk-sdlc-insecure-privileged-apps-ce55ff82.json","targetId":"risk:sdlc-insecure-privileged-apps","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b0afa49a967acc24ef1943c1c131fe5784d92c43bbd7580320f5afda6fd9e95c","properties":{"rationale":"Documentation covering secure configuration guides operators away from over-privileged/insecure deployment.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-08-29ce69df.json","sourceId":"uc:UC-SDLC-08","targetDetailPath":"/data/v1/records/risk-sdlc-insecure-privileged-apps-ce55ff82.json","targetId":"risk:sdlc-insecure-privileged-apps","type":"mitigates"}],"schemaVersion":1}