FedRAMP Disable Inactive Accounts AC-2 (3)

Overview:
The information system automatically disables inactive accounts after [Assignment: organization-defined time period].

Action Items:
1) Disable inactive accounts on a predefined basis

Related Documents:
1) Access Control Policy

2) Identity and Access Management Policy

Additional Guidance:
Moderate FedRAMP-Defined Assignment / Selection Parameters
AC-2 (3) [90 days for user accounts]

Moderate Additional FedRAMP Requirements and Guidance
none