AC-2(2): Automated Temporary and Emergency Account Management
Control Family:
Parent Control:
Threats Addressed:
Baselines:
- Moderate
- High
- OT Moderate (SP 800-82r3)
- OT High (SP 800-82r3)
Previous Version:
- NIST Special Publication 800-53 Revision 4:
- AC-2(2): Removal Of Temporary / Emergency Accounts
Control Statement
Automatically [Assignment: remove, disable] temporary and emergency accounts after [Assignment: organization-defined time period].
Supplemental Guidance
Management of temporary and emergency accounts includes the removal or disabling of such accounts automatically after a predefined time period rather than at the convenience of the system administrator. Automatic removal or disabling of accounts provides a more consistent implementation.
OT Discussion
When the OT (e.g., field devices) cannot support temporary or emergency accounts, this enhancement does not apply. Example compensating controls include employing nonautomated mechanisms or procedures.