FedRAMP Controls / AC
AC-2(13) Disable Accounts for High-risk Individuals
Family AC
Baselines moderate
Mapped KSIs 2
Control statement
Disable accounts of individuals within {{ insert: param, ac-02.13_odp.01 }} of discovery of {{ insert: param, ac-02.13_odp.02 }}. Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is
preserved in the catalog database.
Covered by these Key Security Indicators
| KSI | Title | Category |
|---|---|---|
| KSI-IAM-06 | Suspicious Activity Automatically disable or otherwise secure accounts with privileged access in response to suspicious activity | Identity and Access Management |
| KSI-IAM-07 | Automated Account Management Securely manage the lifecycle and privileges of all accounts, roles, and groups, using automation. | Identity and Access Management |