graphgrc

SCF - IAC-15.3 - Disable Inactive Accounts

Automated mechanisms exist to disable inactive accounts after an organization-defined time period.

Mapped framework controls

ISO 27002

• A.5.16

NIST 800-53

• AC-2(3)

Control questions

Does the organization use automated mechanisms to disable inactive accounts after an organization-defined time period?

This site is open source. Improve this page.