Navigate

AC-2(2)

AC-2(2): Removal of Temporary / Emergency Accounts

The information system automatically [] temporary and emergency accounts after [organization-defined time period for each type of account].

Supplemental

This control enhancement requires the removal of both temporary and emergency accounts automatically after a predefined period of time has elapsed, rather than at the convenience of the systems administrator.

CIA Levels
Confidentiality	high
Integrity	high
Availability	unknown

Overlays
None

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to AC-2(2).

Control	Description
No controls

Enhancements

The controls below (if any) add on to the requirements of AC-2(2).

Control	Description
No controls

Related CCIs

The CCIs below are tied to AC-2(2).

CCI	Definition
CCI-000016	Automatically remove or disable temporary and emergency accounts after an organization-defined time-period for each type of account.
CCI-001361	Defines a time period after which temporary accounts are automatically terminated.
CCI-001365	Defines a time period after which emergency accounts are automatically terminated.
CCI-001682	Automatically remove or disable emergency accounts after an organization-defined time period for each type of account.