5.1 - Establish and Maintain an Inventory of Accounts

The control mandates that an organization create and continuously update a comprehensive inventory of all user, service, and privileged accounts, capturing details such as ownership, purpose, and status. Maintaining this inventory enables effective monitoring, enforcement of least-privilege access, and rapid detection of unauthorized or orphaned accounts.