CCI-002141

Only permit the use of shared and group accounts that meet organization-defined conditions for establishing shared and group accounts.

Implementation Guidance

The organization being inspected/assessed only permits the use of shared/group accounts that meet the conditions for establishing shared/group accounts defined in AC-2 (9), CCI 2140.

Validation Procedures

The organization conducting the inspection/assessment examines the shared/group accounts to ensure the organization being inspected/assessed only permits the use of shared/group accounts that meet the conditions for establishing shared/group accounts defined in AC-2 (9), CCI 2140.

Compelling Evidence

1.) Signed and dated documentation that defines the requirements of creating a shared/group account.

The controls below (if any) were marked by NIST as being related to CCI-002141.