AC-2(11): Usage Conditions

Control Family:

Access Control

Threats Addressed:


  • High

Next Version:

Control Statement

The information system enforces [Assignment: organization-defined circumstances and/or usage conditions] for [Assignment: organization-defined information system accounts].

Supplemental Guidance

Organizations can describe the specific conditions or circumstances under which information system accounts can be used, for example, by restricting usage to certain days of the week, time of day, or specific durations of time.