Hey Guys,
CCI-001459 requires that temp accounts be terminated
after a organizationally defined period of time. Right
now we don't have a check/control that implements that.
I'd like to add prose that recommends that -ALL-
accounts be locked after 60 (or 90... or 120..) days of
inactivity. This would allow us to automatically meet
CCI-001459 and enforces that inactive accounts should
(eventually and automatically) be frozen.
Thoughts? My thinking is that 90 days of inactivity
is a good number.
-Shawn
_______________________________________________
scap-security-guide mailing list
scap-security-guide@lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/scap-security-guide