AC-2 - Account Management

AC-2 establishes processes for creating, modifying, disabling, and removing user accounts and associated privileges across the organization. It requires periodic review of account status, enforcement of least-privilege principles, and secure management of account identifiers and passwords to protect information systems.