Skip to Content

FedRAMP Removal of Temporary / Emergency Accounts AC-2 (2)

Overview:
The information system automatically [Selection: removes; disables] temporary and emergency accounts after [Assignment: organization-defined time period for each type of account].


Supplemental Guidance:
This control enhancement requires the removal of both temporary and emergency accounts automatically after a predefined period of time has elapsed, rather than at the convenience of the systems administrator.


Action Items:
1) Remove temporary accounts on a predefined basis


Related Documents:
1) Access Control Policy

2) Identity and Access Management Policy


Additional Guidance:
Moderate FedRAMP-Defined Assignment / Selection Parameters
AC-2 (2) [no more than 30 days for temporary and emergency account types]


Moderate Additional FedRAMP Requirements and Guidance
none