CCI-000204

Defines the security controls required to manage the risk of compromise due to individuals having accounts on multiple systems.

Implementation Guidance

DoD has defined the security safeguards as policies and user training including advising users not to use the same password for any of the following: Domains of differing classification levels. More than one domain of a classification level (e.g., internal agency network and Intelink). More than one privilege level (e.g., user, administrator).

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the security safeguards as policies and user training including advising users not to use the same password for any of the following: Domains of differing classification levels. More than one domain of a classification level (e.g., internal agency network and Intelink). More than one privilege level (e.g., user, administrator).

Compelling Evidence

Automatically Compliant

The controls below (if any) were marked by NIST as being related to CCI-000204.