>myctrl.tools
Preferences
Under active development — Content is continuously updated and improved · Last updated Feb 18, 2026, 2:55 AM UTC
Compare

AC-2(12)—Account Management

Secret
Technical

>Control Description

ACCOUNT MANAGEMENT | ACCOUNT MONITORING / ATYPICAL USAGE (a) The organization monitors information system accounts for ⚙organization-defined atypical use; and (b) The organization reports atypical usage of information system accounts to ⚙organization-defined personnel or roles.

>Supplemental Guidance

Atypical usage includes, for example, accessing information systems at certain times of the day and from locations that are not consistent with the normal usage patterns of individuals working in organizations. Related controls: CA-7.

Ask AI

Configure your API key to use AI features.