+AC-02(02) Automated Temporary and Emergency Account Management

AC-02(02) Automated Temporary and Emergency Account Management

Control

Automatically [Selection: remove; disable] temporary and emergency accounts after [Assignement: time period].

Discussion

Management of temporary and emergency accounts includes the removal or disabling of such accounts automatically after a predefined time period rather than at the convenience of the system administrator. Automatic removal or disabling of accounts provides a more consistent implementation.

Assessment Objective

temporary and emergency accounts are automatically [Selection: remove; disable] after [Assignement: time period].

Assessment Method

Examine

Access control policy procedures for addressing account management system design documentation system configuration settings and associated documentation system-generated list of temporary accounts removed and/or disabled system-generated list of emergency accounts removed and/or disabled system audit records system security plan other relevant documents or records

Interview

Organizational personnel with account management responsibilities system/network administrators organizational personnel with information security with information security responsibilities system developers

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
is blocked by AC-02(02) Automated Temporary and Emergency Account Management – Assessment Procedure
is blocked by Removal of Temporary / Emergency Accounts