CCI-002151

Disable accounts of individuals within an organization-defined time-period of discovery of organization-defined significant risk.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to disable accounts of users posing a significant risk within 30 minutes unless otherwise defined in formal organizational policy. DoD has defined the time period as 30 minutes unless otherwise defined in formal organizational policy.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process to ensure the organization being inspected/assessed disables accounts of users posing a significant risk within 30 minutes unless otherwise defined in formal organizational policy. DoD has defined the time period as 30 minutes unless otherwise defined in formal organizational policy.

Compelling Evidence

1.) Signed and dated documentation which defines the process for disabling accounts of users posing a significant risk within 30 minutes.

The controls below (if any) were marked by NIST as being related to CCI-002151.