AC-2(4)

Requirement

Automatically audit account creation, modification, enabling, disabling, and removal actions.

Discussion

Account management audit records are defined in accordance with AU-2 and reviewed, analyzed, and reported in accordance with AU-6.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Access control policy; procedures addressing account management; system design documentation; system configuration settings and associated documentation; notifications/alerts of account creation, modification, enabling, disabling, and removal actions; system audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with account management responsibilities; system/network administrators; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Automated mechanisms implementing account management functions].

ID	Assessment Objectives
AC-02(04)[01]	account creation is automatically audited;
AC-02(04)[02]	account modification is automatically audited;
AC-02(04)[03]	account enabling is automatically audited;
AC-02(04)[04]	account disabling is automatically audited;
AC-02(04)[05]	account removal actions are automatically audited.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!