BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

AC-02(11) Usage Conditions

NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
unchanged AC High baseline part of AC-2

Title

Usage Conditions

Control

Enforce [Assignment: circumstances and/or usage conditions] for [Assignment: system accounts].

Discussion

Specifying and enforcing usage conditions helps to enforce the principle of least privilege, increase user accountability, and enable effective account monitoring. Account monitoring includes alerts generated if the account is used in violation of organizational parameters. Organizations can describe specific conditions or circumstances under which system accounts can be used, such as by restricting usage to certain days of the week, time of day, or specific durations of time.

Parameters

ac-02.11_odp.01: circumstances and/or usage conditions
ac-02.11_odp.02: system accounts

Assessment objective

AC-02(11) [Assignment: circumstances and/or usage conditions] for [Assignment: system accounts] are enforced.

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).