An account management policy includes guidelines, standards, and regulations that apply to any area of concern. The policy creates a standard for creation, administration use, and removal of access to information. This policy defines appropriate behavior for users of the company and facilitates service functions. The account management template includes what the enterprise must do, how the enterprise must do it, and how to customize the template to individual enterprise requirements.
Risks Addressed by Policy:
- Without active account management, the potential exists that legitimate users can use these accounts for illegitimate purposes.
- The potential exists that these accounts can be usurped and used illegitimately to access information systems.