CCI-002123

Notify account managers and organization-defined personnel or roles within an organization-defined time-period when accounts are no longer required.

Implementation Guidance

The organization being inspected/assessed implements a process to notify account managers when accounts are no longer required. The organization being inspected/assessed maintains an audit trail of notifications.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the audit trail of notifications to ensure the organization being inspected/assessed implements a process to notify account managers when accounts are no longer required.

Compelling Evidence

1.) Signed and dated documentation that defines the process to notify account managers when accounts are no longer needed. 2.) Audit trail of notifications.

The controls below (if any) were marked by NIST as being related to CCI-002123.