Detections
Analytics
CSCv6|16.6
Title
Monitor account usage to determine dormant accounts, notifying the user or user's manager.Description
Monitor account usage to determine dormant accounts, notifying the user or user's manager. Disable such accounts if not needed, or document and monitor exceptions (e.g., vendor maintenance accounts needed for system recovery or continuity operations). Require that managers match active employees and contractors with each account belonging to their managed staff. Security or system administrators should then disable accounts that are not assigned to valid workforce members.Reference Item Details
Reference: CIS Critical Security Controls v6
Category: Account Monitoring and Control
Family: Application
Audit Items
View all Reference Audit Items