Navigate

AC-2 (2)

AC-2 (2): Removal Of Temporary / Emergency Accounts

The information system automatically [Selection: removes; disables] temporary and emergency accounts after [Assignment: organization-defined time period for each type of account].

Supplemental

This control enhancement requires the removal of both temporary and emergency accounts automatically after a predefined period of time has elapsed, rather than at the convenience of the systems administrator.

CIA Levels
Confidentiality	moderate
Integrity	moderate
Availability	unknown

Overlays
None

Related Controls

The controls below (if any) were marked by NIST as being related to AC-2 (2).

Control	Description
No controls

Enhancements

The controls below (if any) add on to the requirements of AC-2 (2).

Control	Description
No controls

Related CCIs

The CCIs below are tied to AC-2 (2).

CCI	Definition
CCI-000016	The information system automatically removes or disables temporary accounts after an organization-defined time period for each type of account.
CCI-001361	The organization defines a time period after which temporary accounts are automatically terminated.
CCI-001365	The organization defines a time period after which emergency accounts are automatically terminated.
CCI-001682	The information system automatically removes or disables emergency accounts after an organization-defined time period for each type of account.