HOME

AC-2 (9)

AC-2 (9) H M
Description

The organization only permits the use of shared/group accounts that meet [Assignment: organization-defined conditions for establishing shared/group accounts].

FedRAMP
  • H AC-2 (9) [organization-defined need with justification statement that explains why such accounts are necessary]
DISA Cloud Computing SRG

Not appropriate for DoD to define for all CSP's infrastructure or service offerings

Source:
DoD RMF TAG

Further Guidance

AC-2 (9) Required if shared/group accounts are deployed