Disabled Accounts in Privileged Groups

Having a sane account management process requires monitoring membership in privileged groups.

When an administrator leaves, remove their account from privileged groups to avoid accidental reactivation and simplify user management.

Name: Disabled Accounts in Privileged Groups

Codename: C-DISABLED-ACCOUNTS-PRIV-GROUPS

Severity: Low