Information system accounts are the only legitimate method by which information systems may be accessed. Without active account management, the potential exists that legitimate users can use these accounts for illegitimate purposes. Additionally, the potential exists that these accounts can be usurped and used illegitimately to access information systems.

This Account Management Policy Template includes the following sections:

• Default policy statements that define “what” the enterprise must do.
• Default procedures that define “how” the enterprise must do it.
• Baseline recommendations to customize the template to individual enterprise requirements.

Use this and the related templates to build an efficient and effective enterprise Security Policy.