CCI-001973

Manage system identifiers by assigning the identifier to the intended individual, group, role, or device.

Implementation Guidance

Determine if system identifiers are managed by assigning the identifier to the intended individual, group, role, service, or device.

Validation Procedures

Examine: [SELECT FROM: Identification and authentication policy; procedures addressing identifier management; procedures addressing account management; system security plan; system design documentation; system configuration settings and associated documentation; list of system accounts; list of identifiers generated from physical access control devices; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with identifier management responsibilities; organizational personnel with information security responsibilities; system/network administrators; system developers]. Test: [SELECT FROM: Mechanisms supporting and/or implementing identifier management].

The controls below (if any) were marked by NIST as being related to CCI-001973.