iac-15-accountmanagement.md

SCF - IAC-15 - Account Management

Mechanisms exist to proactively govern account management of individual, group, system, service, application, guest and temporary accounts.

Mapped framework controls

ISO 27002

• A.5.15
• A.5.16
• A.5.18

NIST 800-53

• AC-2

SOC 2

• CC6.1

Control questions

Does the organization proactively govern account management of individual, group, system, service, application, guest and temporary accounts?