CISSP Domain7 Section 3 and Section 4
7.3 Perform Configuration Management (e.g., provisioning, baselining, automation)7.4 Apply foundational security operations concepts7.4.1 Need to know/Least privileges7.4.2 Separation of Duties (SoD) and responsibilities7.4.3 Privileged account management7.4.4 Job rotation7.4.5 Service Level Agreement (SLA)