Control(s)
Only permit the use of shared and group accounts that meet [Assignment: organization-defined conditions for establishing shared and group accounts].
Additional Details (Discussion)
Before permitting the use of shared or group accounts, organizations consider the increased risk due to the lack of accountability with such accounts.
Related Control(s)
- None.