ISM-0415

The use of shared user accounts is strictly controlled, and personnel using such accounts are uniquely identifiable.

Topic
User identification
Applicable to
all

History

Priority
must not
Aug 2019
The use of shared user accounts is strictly controlled, and personnel using such accounts are uniquely identifiable.
Security control 0415 was modified to note that when shared user accounts are used, personnel using such accounts still need to be uniquely identifiable by some other means.
Jul 2019
The use of shared user accounts is controlled and auditable.
2015
Agencies must not use shared non user–specific accounts.
2010
Agencies must not use shared non user-specific accounts.