+AC-02(08) Dynamic Account Management

AC-02(08) Dynamic Account Management

Control

Create, activate, manage, and deactivate [Assignement: system accounts] dynamically.

Discussion

Approaches for dynamically creating, activating, managing, and deactivating system accounts rely on automatically provisioning the accounts at runtime for entities that were previously unknown. Organizations plan for the dynamic management, creation, activation, and deactivation of system accounts by establishing trust relationships, business rules, and mechanisms with appropriate authorities to validate related authorizations and privileges.

Assessment Objective

  1. [Assignement: system accounts] are created dynamically;
  2. [Assignement: system accounts] are activated dynamically;
  3. [Assignement: system accounts] are managed dynamically;
  4. [Assignement: system accounts] are deactivated dynamically.

Assessment Method

Examine

Access control policy procedures addressing account management system design documentation system configuration settings and associated documentation system-generated list of system accounts system audit records system security plan other relevant documents or records

Interview

Organizational personnel with account management responsibilities system/network administrators organizational personnel with information security responsibilities system developers

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
is blocked by AC-02(08) Dynamic Account Management – Assessment Procedure