Navigate

AC-2 (11)

AC-2 (11): Usage Conditions

The information system enforces [Assignment: organization-defined circumstances and/or usage conditions] for [Assignment: organization-defined information system accounts].

Supplemental

Organizations can describe the specific conditions or circumstances under which information system accounts can be used, for example, by restricting usage to certain days of the week, time of day, or specific durations of time.

CIA Levels
Confidentiality	high
Integrity	high
Availability	unknown

Overlays
None

Related Controls

The controls below (if any) were marked by NIST as being related to AC-2 (11).

Control	Description
No controls

Enhancements

The controls below (if any) add on to the requirements of AC-2 (11).

Control	Description
No controls

Related CCIs

The CCIs below are tied to AC-2 (11).

CCI	Definition
CCI-002143	The organization defines the circumstances and/or usage conditions that are to be enforced for organization-defined information system accounts.
CCI-002144	The organization defines the information system accounts that are to be subject to the enforcement of organization-defined circumstances and/or usage conditions.
CCI-002145	The information system enforces organization-defined circumstances and/or usage conditions for organization-defined information system accounts.