Monterey - Employ Automated Mechanisms for Account Management Functions

Information

The organization should employ automated mechanisms to support the management of information system accounts.

The use of automated mechanisms prevents against human error and provide a faster and more efficient means of relaying time-sensitive information and account management.

To employ automated mechanisms for account management functions, many operating systems can be integrated with an enterprise-level directory service that meets or exceeds this requirement.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

This requirement is a permanent finding and cannot be fixed. An appropriate mitigation for the system must be implemented, but this finding cannot be considered fixed.

See Also

https://github.com/usnistgov/macos_security

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-2(1), CCE|CCE-90984-6, CCI|CCI-000015

Plugin: Unix

Control ID: c2ba09e69e8c70952a9995001c45835bdfcad52443a4f1fa47c7786f17863b2c