AC-2(2): Removal Of Temporary / Emergency Accounts

Control Family:

Access Control

Threats Addressed:


  • Moderate
  • High

Next Version:

Control Statement

The information system automatically [Selection: removes; disables] temporary and emergency accounts after [Assignment: organization-defined time period for each type of account].

Supplemental Guidance

This control enhancement requires the removal of both temporary and emergency accounts automatically after a predefined period of time has elapsed, rather than at the convenience of the systems administrator.