O3.08
Confirmation of Privilege-Elevation Operations
Cards in this group · 7
- O3.08.1Privilege elevation requires explicit confirmation
- O3.08.2Confirmation must explain what capability will be gained
- O3.08.3Elevated privilege needs a time limit
- O3.08.4Frequent elevation prompts produce unthinking consecutive approval
- O3.08.5One approval is often expanded to cover all later related operations
- O3.08.6Ambiguous elevation wording makes users underestimate granted authority
- O3.08.7Batch or silent elevation needs stricter limits than one interactive request