The organization manages information system accounts by identifying authorized users of the information system and specifying access privileges.