AC-2 (4)

Access ControlRev 5system

Account Management

Baselines:ModerateHigh

Control Statement

Automatically audit account creation, modification, enabling, disabling, and removal actions.

Supplemental Guidance

Account management audit records are defined in accordance with [AU-02](#au-2) and reviewed, analyzed, and reported in accordance with [AU-06](#au-6).

Related Controls (2)

AU-2 AU-6

CCI Identifiers (11)

CCI-000018Automatically audit account creation actions.CCI-002131The organization defines the personnel or roles to be notified on account creation, modification, enabling, disabling, and removal actions.CCI-001684The information system notifies organization-defined personnel or roles for account modification actions.CCI-001685The information system notifies organization-defined personnel or roles for account disabling actions.CCI-001686The information system notifies organization-defined personnel or roles for account removal actions.CCI-002130Automatically audit account enabling actions.CCI-001683The information system notifies organization-defined personnel or roles for account creation actions.CCI-002132The information system notifies organization-defined personnel or roles for account enabling actions.CCI-001403Automatically audit account modification actions.CCI-001404Automatically audit account disabling actions.CCI-001405Automatically audit account removal actions.

Linked STIG Checks (200)

Across 55 STIGs. Click to expand.