Practice 7: Implement Strict Password- and Account-Management Policies and Practices

If your organization’s computer accounts can be compromised, insiders can circumvent manual and automated control mechanisms.

What Can You Do?

No matter how vigilant you are about mitigating the threats posed by insiders, if your computer accounts can be compromised, insiders have an opportunity to circumvent mechanisms in place to prevent insider attacks. Therefore, computer account- and password-management policies and practices are critical to impede an insider’s ability to use your systems for illicit purposes. Fine-grained access control combined with proper computer account management will ensure that access to all of your critical electronic assets is