AC-2(2) Automated Temporary and Emergency Account Management

Family AC

Baselines moderate

Mapped KSIs 3

Control statement

Automatically {{ insert: param, ac-02.02_odp.01 }} temporary and emergency accounts after {{ insert: param, ac-02.02_odp.02 }}.

Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is preserved in the catalog database.

Covered by these Key Security Indicators

KSI	Title	Category
KSI-IAM-03	Non-User Accounts Enforce appropriately secure authentication methods for non-user accounts and services.	Identity and Access Management
KSI-IAM-04	Just-in-Time Authorization Use a least-privileged, role and attribute-based, and just-in-time security authorization model for all user and non-user accounts and services.	Identity and Access Management
KSI-IAM-07	Automated Account Management Securely manage the lifecycle and privileges of all accounts, roles, and groups, using automation.	Identity and Access Management