+AC-02(08) Dynamic Account Management
|
AC-02(08) Dynamic Account Management
Control
Create, activate, manage, and deactivate [Assignement: system accounts] dynamically.
Discussion
Approaches for dynamically creating, activating, managing, and deactivating system accounts rely on automatically provisioning the accounts at runtime for entities that were previously unknown. Organizations plan for the dynamic management, creation, activation, and deactivation of system accounts by establishing trust relationships, business rules, and mechanisms with appropriate authorities to validate related authorizations and privileges.
Assessment Objective
- [Assignement: system accounts] are created dynamically;
- [Assignement: system accounts] are activated dynamically;
- [Assignement: system accounts] are managed dynamically;
- [Assignement: system accounts] are deactivated dynamically.
Assessment Method
Examine
Access control policy
procedures addressing account management
system design documentation
system configuration settings and associated documentation
system-generated list of system accounts
system audit records
system security plan
other relevant documents or records
Interview
Organizational personnel with account management responsibilities
system/network administrators
organizational personnel with information security responsibilities
system developers
1. Pregled
1.1 Reference
1.2 Utvrđeni zahtjevi
1.3 Povezani propisi
2. Utvrđeni zahtjevi
3. Povezani propisi
Povezani zadaci
|