AC-2 (8)

Access ControlRev 5system

Account Management

Control Statement

Create, activate, manage, and deactivate [Assignment: system accounts] dynamically.

Supplemental Guidance

Approaches for dynamically creating, activating, managing, and deactivating system accounts rely on automatically provisioning the accounts at runtime for entities that were previously unknown. Organizations plan for the dynamic management, creation, activation, and deactivation of system accounts by establishing trust relationships, business rules, and mechanisms with appropriate authorities to validate related authorizations and privileges.

Related Controls (1)

AC-16

CCI Identifiers (8)

CCI-002138Defines the system accounts that can be dynamically created.CCI-002139Create organization-defined system accounts dynamically.CCI-003636Deactivate organization-defined system accounts dynamically.CCI-003631Defines the system accounts that can be dynamically activated.CCI-003632Activate organization-defined system accounts dynamically.CCI-003633Defines the system accounts that can be dynamically managed.CCI-003634Manage organization-defined system accounts dynamically.CCI-003635Defines the system accounts that can be dynamically deactivated.

Linked STIG Checks (1)

Across 1 STIGs. Click to expand.