Determining System Certification & Accreditation Levels of ...

The number of roles or account types used in the system, whether they are considered ordinary or privileged accounts. The security controls that enforce each role/account type must be evaluated as part of the certification effort. The overall level of effort required for the certification increases with larger numbers of roles/account types. ................
................