AC-2(3): Disable Inactive Accounts

Control Family:

Access Control

Threats Addressed:

Baselines:

  • Moderate
  • High

Next Version:

Control Statement

The information system automatically disables inactive accounts after [Assignment: organization-defined time period].