Restrictions on Use of Shared and Group Accounts from NIST 800-53 v5 framework

SAMMY works best on screens 1024px wide or larger.

Access Control
Awareness and Training
Audit and Accountability
Assessment, Auithorization and Monitoring
Configuration Management
Contingency Planning
Identification and Authentication
Incident Response
Maintenance
Media Protection
Physical and Environmental Protection
Planning
Program Management
Personnel Security
Personally Identifiable Information Processing and Transparency
Risk Assessment
System and Services Acquisition
System and Communications Protection
System and Information Integrity
Supply Chain Risk Management

AC-2(9): Restrictions on Use of Shared and Group Accounts

Restrictions on Use of Shared and Group Accounts

AC-2(9): Restrictions on Use of Shared and Group Accounts

Only permit the use of shared and group accounts that meet [Assignment: organization-defined conditions for establishing shared and group accounts].

Description

Before permitting the use of shared or group accounts, organizations consider the increased risk due to the lack of accountability with such accounts.