AC-2.4: Automated Audit Actions

account creation is automatically audited;

account modification is automatically audited;

account enabling is automatically audited;

account disabling is automatically audited;

account removal actions are automatically audited.

Access control policy

procedures addressing account management

system design documentation

system configuration settings and associated documentation

notifications/alerts of account creation, modification, enabling, disabling, and removal actions

system audit records

system security plan

other relevant documents or records

Organizational personnel with account management responsibilities

system/network administrators

organizational personnel with information security responsibilities

Automated mechanisms implementing account management functions