CCI-000796

Prohibit the use of system account identifiers that are the same as public identifiers for individual accounts.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to prohibit the use of information system account identifiers that are the same as public identifiers for individual electronic mail accounts.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines documented process to ensure the organization being inspected/assessed prohibits the use of information system account identifiers that are the same as public identifiers for individual electronic mail accounts.

Compelling Evidence

1.) Signed and dated Configuration Management Policy, referencing device identification section

The controls below (if any) were marked by NIST as being related to CCI-000796.