Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-264292 | SRG-APP-000705-NDM-000110 | SV-264292r984117_rule | Medium |
Description |
---|
Disabling expired, inactive, or otherwise anomalous accounts supports the concepts of least privilege and least functionality which reduce the attack surface of the system. |
STIG | Date |
---|---|
Network Device Management Security Requirements Guide | 2024-05-30 |
Check Text ( C-68205r984115_chk ) |
---|
Verify the network device is configured to disable accounts when the accounts are no longer associated to a user. If the network device is not configured to disable accounts when the accounts are no longer associated to a user, this is a finding. |
Fix Text (F-68113r984116_fix) |
---|
Configure the network device to disable accounts when the accounts are no longer associated to a user. |