CISSP: Certified Information Systems Security Professional

Question

A recent internal audit at an organization found malicious activity by a user account. Further investigation showed that multiple people at multiple locations were simultaneously using the offending account for different services and applications. What is the BEST way to prevent this issue in the future?

Explanation

Each person should use a unique account so authentication and audit records can be reliably tied to an individual, providing accountability and allowing access to be managed or revoked per user. Shared accounts prevent dependable attribution of activity to a specific person. NIST defines individual accountability as the ability to positively associate a user’s identity with the time, method, and degree of access to an information system.

Learn more

CISSP: Certified Information Systems Security Professional

AstroTutor

Notes

Readiness

QuestionQ98

Community Discussion