💼 AC-2(12) Account Monitoring for Atypical Usage (M)(H)
- Contextual name: 💼 AC-2(12) Account Monitoring for Atypical Usage (M)(H)
- ID:
/frameworks/fedramp-high-security-controls/ac/02/12 - Located in: 💼 AC-2 Account Management (L)(M)(H)
Description
(a) Monitor system accounts for [Assignment: organization-defined atypical usage]; and
(b) Report atypical usage of system accounts to [FedRAMP Assignment: at a minimum, the ISSO and/or similar role within the organization].
AC-2 (12) Additional FedRAMP Requirements and Guidance:
(a) Requirement: Required for privileged accounts.
(b) Requirement: Required for privileged accounts.
Similar
- Sections
/frameworks/nist-sp-800-53-r5/ac/02/12
- Internal
- ID:
dec-c-863a8f89
- ID:
Similar Sections (Take Policies From)
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|---|---|---|---|
| 💼 NIST SP 800-53 Revision 5 → 💼 AC-2(12) Account Management _ Account Monitoring for Atypical Usage |
Similar Sections (Give Policies To)
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|---|---|---|---|
| 💼 FedRAMP Moderate Security Controls → 💼 AC-2(12) Account Monitoring for Atypical Usage (M)(H) | 2 |
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|
Policies (2)
| Policy | Logic Count | Flags |
|---|---|---|
| 📝 AWS Account IAM Access Analyzer is not enabled for all regions 🟢 | 1 | 🟢 x6 |
| 📝 AWS Account Multi-Region CloudTrail is not enabled 🟢 | 1 | 🟢 x6 |
Internal Rules
| Rule | Policies | Flags |
|---|---|---|
| ✉️ dec-x-ab7fc52e | 1 | |
| ✉️ dec-z-3f480eb5 | 1 |