ComplianceNIST 800-53 enhancement

NIST-AC-2(2) Automated Temporary and Emergency Account Management

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
AC Access Control
Control
AC-2(2)

Control statement

Automatically [Selection (one of): remove; disable] temporary and emergency accounts after [Assignment: time period].

Discussion

Management of temporary and emergency accounts includes the removal or disabling of such accounts automatically after a predefined time period rather than at the convenience of the system administrator. Automatic removal or disabling of accounts provides a more consistent implementation.

Related

Enhancement of · Compliance (1)

  • NIST-AC-2 Account Management NIST 800-53 control