5.1: Establish and Maintain an Inventory of Accounts

CSF v1.1 References:

CSF v2.0 References:

PF v1.0 References:


Info icon.

Incorporates the following controls from the previous version of the control set: 4.1: Maintain Inventory of Administrative Accounts, 16.6: Maintain an Inventory of Accounts.

Control Statement

Establish and maintain an inventory of all accounts managed in the enterprise. The inventory must include both user and administrator accounts. The inventory, at a minimum, should contain the person’s name, username, start/stop dates, and department. Validate that all active accounts are authorized, on a recurring schedule at a minimum quarterly, or more frequently.

[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]