Responsible Role: Parameter (c) : Implementation Status (check all that apply): Implemented Partially implemented Not implemented – risk acceptance sought Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information System Abbreviation>, <Date of PA> AC-2 (7) c What is the solutions and how is it implemented? AC-2(9) Account Management| Restrictions on Use of Shared Groups/Accounts The organization only permits the use of shared/group accounts that meet [DoD Assignment: The CSP defines conditions for establishing shared/group accounts, if applicable. The conditions are approved and accepted by the DISA AO]. Additional DoD Requirement: In support of auditing and accountability, shared/group accounts are not permitted unless the requirement to uniquely attribute user activity to the account is implemented; exceptions may be approved on a case-by-case basis. Personal accounts will not be shared. FedRAMP v2 baseline parameter: [Additional Requirements and Guidance: required if shared group accounts are deployed]
Responsible Role: Parameter (c) : Implementation Status (check all that apply): Implemented Partially implemented Not implemented – risk acceptance sought Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information System Abbreviation>, <Date of PA> AC-2 (7) c What is the solutions and how is it implemented? AC-2(9) Account Management| Restrictions on Use of Shared Groups/Accounts The organization only permits the use of shared/group accounts that meet [DoD Assignment: The CSP defines conditions for establishing shared/group accounts, if applicable. The conditions are approved and accepted by the DISA AO]. Additional DoD Requirement: In support of auditing and accountability, shared/group accounts are not permitted unless the requirement to uniquely attribute user activity to the account is implemented; exceptions may be approved on a case-by-case basis. Personal accounts will not be shared. FedRAMP v2 baseline parameter: [Additional Requirements and Guidance: required if shared group accounts are deployed]