AC-2(2): Removal Of Temporary / Emergency Accounts

Control Family:

Access Control

Parent Control:

AC-2: Account Management

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

PR.AC-1
PR.AC-4
PR.AC-6
DE.CM-1
DE.CM-3

Threats Addressed:

Spoofing
Repudiation

Baselines:

Moderate
High

Next Version:

NIST Special Publication 800-53 Revision 5:
AC-2(2): Automated Temporary and Emergency Account Management

Control Statement

The information system automatically [Selection: removes; disables] temporary and emergency accounts after [Assignment: organization-defined time period for each type of account].

Supplemental Guidance

This control enhancement requires the removal of both temporary and emergency accounts automatically after a predefined period of time has elapsed, rather than at the convenience of the systems administrator.