CM-5(5)

Limit privileges to change system components and system-related information within a production or operational environment; and Review and reevaluate在生产或运营环境中，限制变更系统组件及与系统相关信息权限；并复审及重新评估。