id: "AC-02(01)" title: "Automated System Account Management" family: "AC" family_name: "Access Control" sort_id: "ac-02.01" priority: "P1" implementation_level: "organization" parent: "AC-02" enhancement: True
Statement
Support the management of system accounts using {{ insert: param, ac-02.01_odp }}.
Guidance
Automated system account management includes using automated mechanisms to create, enable, modify, disable, and remove accounts; notify account managers when an account is created, enabled, modified, disabled, or removed, or when users are terminated or transferred; monitor system account usage; and report atypical system account usage. Automated mechanisms can include internal system functions and email, telephonic, and text messaging notifications.
Assessment Objective
the management of system accounts is supported using {{ insert: param, ac-02.01_odp }}.
Access control policy
procedures for addressing account management
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
Organizational personnel with account management responsibilities
system/network administrators
organizational personnel with information security with information security responsibilities
system developers
Automated mechanisms for implementing account management functions