Merge pull request #11393 from sig-bsi-grundschutz/bsi-app-4.4-a10

Defined notes and rules for control BSI APP4.4.A10
ComplianceAsCode · Feb 15, 2024 · 9a72a41 · 9a72a41
2 parents 1a3d088 + 9155443
commit 9a72a41
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/controls/bsi_app_4_4.yml b/controls/bsi_app_4_4.yml
@@ -184,8 +184,9 @@ controls:
       start pods via automation software, this SHOULD be done for each group through separate
       processes that only have the rights necessary for the respective user group.
     notes: >-
-      TBD
-    status: pending
+      This control needs to be adressed on an organizational level. All service accounts used by 
+      automation software need to adhere to the principle of least privilege.
+    status: not applicable
     rules: []
 
   - id: APP.4.4.A11