Account Management (AC-2 (1) (2) (3) (4)) SOM accounts are managed by DTMB/Office Automation (OA) Application accounts are managed by ……… Database accounts are managed by …… Temporary and emergency accounts are set to expire in Active Directory when the account is set up through the DTMB-0161 process. Complies with this control Yes No N/A See Risk # Access Enforcement (AC-3) DTMB 1350.10 Authentication Requirement for Access to Networks, Systems, Computers, Databases, and Applications requires the identification and use of approved personal authentication methods, appropriate for the identified of security required, for access to SOM information technology resources to prevent unauthorized access or maintain resource data integrity. DTMB 1350.40 Access Control Criteria for Right to Use Automated Information Resources establishes, documents, and manages the allocation of user access rights. Access privileges are limited on the of an approved specific business need (i.e., a need-to-know basis or the least privilege concept). Access privileges are granted to authorize users, modified when each user’s job duties change, terminated when a user separates service. Complies with this control Yes No N/A See Risk # Information Flow Enforcement (AC-4) DTMB 1350.10 Authentication Requirement for Access to Networks, Systems, Computers, Databases, and Applications requires the identification and use of approved personal authentication methods, appropriate for the identified of security required, for access to SOM information technology resources to prevent unauthorized access or maintain resource data integrity. DTMB 1350.40 Access Control Criteria for Right to Use Automated Information Resources establishes, documents, and manages the allocation of user access rights.
Account Management (AC-2 (1) (2) (3) (4)) SOM accounts are managed by DTMB/Office Automation (OA) Application accounts are managed by ……… Database accounts are managed by …… Temporary and emergency accounts are set to expire in Active Directory when the account is set up through the DTMB-0161 process. Complies with this control Yes No N/A See Risk # Access Enforcement (AC-3) DTMB 1350.10 Authentication Requirement for Access to Networks, Systems, Computers, Databases, and Applications requires the identification and use of approved personal authentication methods, appropriate for the identified of security required, for access to SOM information technology resources to prevent unauthorized access or maintain resource data integrity. DTMB 1350.40 Access Control Criteria for Right to Use Automated Information Resources establishes, documents, and manages the allocation of user access rights. Access privileges are limited on the of an approved specific business need (i.e., a need-to-know basis or the least privilege concept). Access privileges are granted to authorize users, modified when each user’s job duties change, terminated when a user separates service. Complies with this control Yes No N/A See Risk # Information Flow Enforcement (AC-4) DTMB 1350.10 Authentication Requirement for Access to Networks, Systems, Computers, Databases, and Applications requires the identification and use of approved personal authentication methods, appropriate for the identified of security required, for access to SOM information technology resources to prevent unauthorized access or maintain resource data integrity. DTMB 1350.40 Access Control Criteria for Right to Use Automated Information Resources establishes, documents, and manages the allocation of user access rights.