CCI-002151

The organization disables accounts of users posing a significant risk within an organization-defined time period of discovery of the risk.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to disable accounts of users posing a significant risk within 30 minutes unless otherwise defined in formal organizational policy. DoD has defined the time period as 30 minutes unless otherwise defined in formal organizational policy.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process to ensure the organization being inspected/assessed disables accounts of users posing a significant risk within 30 minutes unless otherwise defined in formal organizational policy. DoD has defined the time period as 30 minutes unless otherwise defined in formal organizational policy.

Compelling Evidence

1.) Signed and dated documentation which defines the process for disabling accounts of users posing a significant risk within 30 minutes.

The controls below (if any) were marked by NIST as being related to CCI-002151.