BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

AC-02(13) Disable Accounts for High-risk Individuals

NIST SP 800-53 (controls) 5.1.1+u4
All changes in this version
first version loaded AC Moderate baselineHigh baseline part of AC-2

Title

Disable Accounts for High-risk Individuals

Control

Disable accounts of individuals within [Assignment: time period] of discovery of [Assignment: significant risks].

Discussion

Users who pose a significant security and/or privacy risk include individuals for whom reliable evidence indicates either the intention to use authorized access to systems to cause harm or through whom adversaries will cause harm. Such harm includes adverse impacts to organizational operations, organizational assets, individuals, other organizations, or the Nation. Close coordination among system administrators, legal staff, human resource managers, and authorizing officials is essential when disabling system accounts for high-risk individuals.

Parameters

ac-02.13_odp.01: time period
ac-02.13_odp.02: significant risks

Related controls

au-6, si-4

Assessment objective

AC-02(13) accounts of individuals are disabled within [Assignment: time period] of discovery of [Assignment: significant risks].

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).