CCI-004098

Require that the registration process to receive an account for logical access includes supervisor or sponsor authorization.

Implementation Guidance

Determine if the registration process to receive an account for logical access includes supervisor or sponsor authorization.

Validation Procedures

Examine: [SELECT FROM: Identification and authentication policy; procedures addressing identity proofing; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with system operations responsibilities; organizational personnel with information security responsibilities; system/network administrators; system developers; organizational personnel with identification and authentication responsibilities]. Test: [SELECT FROM: Mechanisms supporting and/or implementing identification and authentication capabilities].

The controls below (if any) were marked by NIST as being related to CCI-004098.