Account management, as a whole, ensures access to the network device is being controlled in a secured manner by granting access to only authorized personnel. Auditing account termination will support account management procedures. When application accounts are terminated, user or service accessibility may be affected. Auditing also ensures authorized active accounts remain enabled and available for use when required.
This requirement is applicable to accounts created or maintained using the network device application itself rather than the underlying OS or an authentication server. Accounts created and maintained an authentication server (e.g., RADIUS, LDAP, or Active Directory) are secured using the applicable security guide or STIG. |