AC-2.3: Disable Accounts

accounts are disabled within time period when the accounts have expired;

accounts are disabled within time period when the accounts are no longer associated with a user or individual;

accounts are disabled within time period when the accounts are in violation of organizational policy;

accounts are disabled within time period when the accounts have been inactive for time period .

Access control policy

procedures for addressing account management

system security plan

system design documentation

system configuration settings and associated documentation

system-generated list of accounts removed

system-generated list of emergency accounts disabled

system audit records

system security plan

other relevant documents or records

Organizational personnel with account management responsibilities

system/network administrators

organizational personnel with information security responsibilities

system developers

Mechanisms for implementing account management functions