Assessment Objective
Determine if:
- AC-02(02) temporary and emergency accounts are automatically [Selection: remove; disable] after [Assignment: time period].
Assessment Methods
Examine
- Access control policy
- procedures for addressing account management
- system design documentation
- system configuration settings and associated documentation
- system-generated list of temporary accounts removed and/or disabled
- system-generated list of emergency accounts removed and/or disabled
- system audit records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with account management responsibilities
- system/network administrators
- organizational personnel with information security with information security responsibilities
- system developers
Test
- Automated mechanisms for implementing account management functions
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | AC-02(02) Automated Temporary and Emergency Account Management |