Database administrators have unique and identifiable accounts.
Topic
Database administrator accounts
Applicable to
all
History
Priority
must
Mar 2023
Removed
An existing control relating to database administrators having unique and identifiable accounts was rescinded due to duplication of existing controls [ISM-0414, ISM-0415] relating to personnel with access to systems and their resources being either uniquely identifiable, or if not, having shared accounts that are strictly controlled.
2015
Database administrators must have unique and identifiable accounts.