What Account Management (NIST SP 800-53 AC-2) requires
The Account Management control establishes a comprehensive framework, consistent with NIST Special Publication 800-53 AC-2, for managing the full lifecycle of information system accounts. This governance is essential for satisfying the identity management and access rights principles of ISO/IEC 27001, supporting the security of processing measures under GDPR Article 32, and meeting the logical access security criteria specified by SOC 2 CC6.3 and PCI DSS Requirement 8.1. System configuration mandates that all account provisioning actions must `require_manager_approval` and strictly `enforce_least_privilege`. To maintain operational integrity, the platform will `audit_account_creation_and_modification` activities, `alert_on_privileged_role_assignment`, and `enforce_separation_of_duties`. Access rights undergo a `periodic_review_interval_days` of every 90 days, while dormant accounts are subject to `auto_disable_inactive_days` after 35 days of inactivity. Temporary accounts are constrained by a `max_temporary_account_validity_hours` of 72 hours. Deprovisioning procedures are executed swiftly, with a mandate to `terminate_access_on_departure_hours` within 24 hours of notification and to `auto_remove_orphaned_accounts` systematically. Security is hardened by limiting `max_failed_login_attempts` to 3 and ensuring administrative functions `require_mfa_for_account_management`, thereby creating a robust, auditable system for managing identities and permissions.
Pillar: Cybersecurity · Authority: NIST (National Institute of Standards and Technology) · Version: 1.1.0 · Last updated:
Primary source: https://doi.org/10.6028/NIST.SP.800-53r5
SHA-256 integrity: 912c224b52fd53abdda79dc6c1a9d53265a1a6b7615ab17903bdbe9789f7e95e
Primary Citations — 7 traced to source
- NIST Special Publication 800-53 Revision 5, Control AC-2: Account Management
- ISO/IEC 27001:2022, Annex A 5.16: Identity Management
+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/cyber-nist-800-53-ac2.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/cyber-nist-800-53-ac2.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/cyber-nist-800-53-ac2
- Back to registry: Browse all 10,108 compliance nodes