Requirement:

The asset owner shall have policies and procedures related to requiring explicit elevation of privileges, including supervisor overrides, for all operations that require elevated privileges.

Guidance: