Access limitations—11​.10 (d)

"(d) Limiting system access to authorized individuals."

Procedures need to be defined that address system user administration, including who should be granted access and how that access is granted. Often systems require administrator level or otherwise high level users with great latitude in the actions they can perform within the system. These high level users should get special attention when considering rules, limitations, and other procedural safeguards that can be applied.