Defined notes and rules for control BSI APP4.4.A10

sig-bsi-grundschutz · Jan 19, 2024 · ae09bf5 · ae09bf5
1 parent 64bdbd1
commit ae09bf5
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/controls/bsi_app_4_4.yml b/controls/bsi_app_4_4.yml
@@ -184,8 +184,9 @@ controls:
       start pods via automation software, this SHOULD be done for each group through separate
       processes that only have the rights necessary for the respective user group.
     notes: >-
-      TBD
-    status: pending
+      This control needs to be adressed on an organizational level. All service accounts used by 
+      automation software need to adhere to the principal of least privilege.
+    status: not applicable
     rules: []
 
   - id: APP.4.4.A11