AC-2(8)

Requirement

Create, activate, manage, and deactivate [Assignment: organization-defined system accounts] dynamically.

Discussion

Approaches for dynamically creating, activating, managing, and deactivating system accounts rely on automatically provisioning the accounts at runtime for entities that were previously unknown. Organizations plan for the dynamic management, creation, activation, and deactivation of system accounts by establishing trust relationships, business rules, and mechanisms with appropriate authorities to validate related authorizations and privileges.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Access control policy; procedures addressing account management; system design documentation; system configuration settings and associated documentation; system-generated list of system accounts; system audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with account management responsibilities; system/network administrators; organizational personnel with information security responsibilities; system developers].

Test

[SELECT FROM: Automated mechanisms implementing account management functions].

ID	Assessment Objectives
AC-02(08)[04]	<AC-02(08)_ODP system accounts> are deactivated dynamically.
AC-02(08)[01]	<AC-02(08)_ODP system accounts> are created dynamically;
AC-02(08)[02]	<AC-02(08)_ODP system accounts> are activated dynamically;
AC-02(08)[03]	<AC-02(08)_ODP system accounts> are managed dynamically;

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!