IAM-08—Shared Logical Accounts: Group Member

>Control Description

Passwords for shared and group accounts are reset when a member of the shared group leaves.

Theme

Process

Type

Preventive

Policy/Standard

Access Management Procedure

>Implementation Guidance

1. Design and document a process for Password Policy and requirements for changing password of shared and group accounts. 2. Ensure that the password is changed if a member of the shared group leaves.

>Testing Procedure

1. Inspect Organization's password policy and check requirement for changing the password for shared and group accounts are clearly defined. 2. Inspect shared credential storage tools to check the operational effectiveness and ensure passwords are changed when a member of the shared group leaves.