AC-2(9): Restrictions On Use Of Shared / Group Accounts

Control Family:

Access Control

Parent Control:

AC-2: Account Management

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

PR.AC-1
PR.AC-4
PR.AC-6
DE.CM-1
DE.CM-3

Threats Addressed:

Elevation of Privilege

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5:
AC-2(9): Restrictions on Use of Shared and Group Accounts

Control Statement

The organization only permits the use of shared/group accounts that meet [Assignment: organization-defined conditions for establishing shared/group accounts].