Overview:
The information system automatically disables inactive accounts after [Assignment: organization-defined time period].
Action Items:
1) Disable inactive accounts on a predefined basis
Related Documents:
1) Access Control Policy
2) Identity and Access Management Policy
Additional Guidance:
Moderate FedRAMP-Defined Assignment / Selection Parameters
AC-2 (3) [90 days for user accounts]
Moderate Additional FedRAMP Requirements and Guidance
none
Article ID: 13
Created: September 25, 2022
Last Updated: September 26, 2022
Author: Matthew Burdick
Online URL: http://www.compliancewiki.org/article/fedramp-disable-inactive-accounts-ac-2-3-13.html