CCI-002125

Notify account managers and organization-defined personnel or roles within an organization-defined time-period when system usage or need-to-know changes for an individual.

Implementation Guidance

The organization being inspected/assessed implements a process to notify account managers when individual information system usage or need-to-know changes. The organization being inspected/assessed maintains an audit trail of notifications.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the audit trail of notifications to ensure the organization being inspected/assessed implements a process to notify account managers when individual information system usage or need-to-know changes.

Compelling Evidence

1.) Signed and dated documentation that defines the process to notify account managers when individual information system usage or need-to-know changes. 2.) Audit trail of notifications.

The controls below (if any) were marked by NIST as being related to CCI-002125.