CCI-001403

Implementation Guidance

Determine if: - account creation is automatically audited. - account modification is automatically audited. - account disabling is automatically audited. - account removal actions are automatically audited.

Validation Procedures

Examine: [SELECT FROM: Access control policy; procedures addressing account management; system design documentation; system configuration settings and associated documentation; notifications/alerts of account creation, modification, enabling, disabling, and removal actions; system audit records; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with account management responsibilities; system/network administrators; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Automated mechanisms implementing account management functions].