Detections
Analytics
800-53|AC-2(13)
Title
DISABLE ACCOUNTS FOR HIGH-RISK INDIVIDUALSDescription
The organization disables accounts of users posing a significant risk within [Assignment: organization-defined time period] of discovery of the risk.Supplemental
Users posing a significant risk to organizations include individuals for whom reliable evidence or intelligence indicates either the intention to use authorized access to information systems to cause harm or through whom adversaries will cause harm. Harm includes potential adverse impacts to organizational operations and assets, individuals, other organizations, or the Nation. Close coordination between authorizing officials, information system administrators, and human resource managers is essential in order for timely execution of this control enhancement.Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Related: PS-4
Category: ACCESS CONTROL
Parent Title: ACCOUNT MANAGEMENT
Family: ACCESS CONTROL
Baseline Impact: HIGH