CCI-001990

Manage system authenticators by changing authenticators for group or role accounts when membership to those accounts changes.

Implementation Guidance

The organization being inspected/assessed documents and implements procedures for changing authenticators for group/role accounts when membership to those accounts changes.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented procedures for group/role authenticator change to ensure the procedures are defined and applied when membership to those accounts changes. The organization conducting the inspection/assessment obtains and examines a sampling of authenticator age data and documentation of personnel role changes to ensure that group/role authenticators are changed when membership changes.

Compelling Evidence

1.) Signed and dated Key Management Policy for changing authenticators for group/role accounts when membership to those accounts change 2.) Signed and dated SOP/TTP for passwords, ensuring procedures in place for changing authenticators for group/role accounts when membership to those account changes.

The controls below (if any) were marked by NIST as being related to CCI-001990.