Skip to content

Account Management

What is Account Management?

The processes for creating, modifying, monitoring, and removing user accounts throughout their lifecycle.

Information Security

Each of these is named in at least one of the same controls as account management. The number is how many controls name both.

What the standards actually require on account management

Requirements naming account management across 6 standards, quoted from the control text.

Implement [Assignment: organization-defined dynamic privilege management capabilities].

NIST800-AC-2(6) · AC-2(6) Account Management | Dynamic Privilege Management →

Audit account creation, modification, enabling, disabling and removal automatically.

fbi-cjis-security-policy::AC-2(4) · AC-2(4) Account Management | Automated Audit Actions →

Automatically audit account creation, modification, enabling, disabling, and removal actions.

nist-sp-800-53-revision-5-1-high::AC-2(4) · AC-2(4) Account Management | Automated Audit Actions →

Automatically audit account creation, modification, enabling, disabling, and removal actions.

nist-sp-800-53-rev-5-moderate::AC-2(4) · AC-2(4) Account Management | Automated Audit Actions →
IEC 624434 controls

A process shall be employed to create user documentation describing the accounts the product supports and how to manage them: default accounts, their intended use, how to change and remove them, and the roles and privileges available.

iec-62443::SG-6 · Account management guidelines →
FedRAMP High2 controls

Automatically disable temporary and emergency accounts within FedRAMP-defined timeframe (no longer than 24 hours).

AC-2(2) · Automated Temporary and Emergency Account Management →

Questions people ask about account management

What is Account Management?
The processes for creating, modifying, monitoring, and removing user accounts throughout their lifecycle.
Why is Account Management important for compliance?
Account Management is a key concept in Information Security. Understanding account management helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Account Management?
Account Management appears in the requirement text of NIST SP 800-53 Rev 5, FBI CJIS Security Policy, NIST SP 800-53 Rev 5 HIGH, NIST SP 800-53 Rev 5 MODERATE, IEC 62443. Across these standards we have identified 44 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Account Management?
Explore our compliance framework pages to see how account management applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Account Management applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.