CIS Controls v8

CIS 5 Account Management

Starts in IG1 | Manage account lifecycle and remove stale access.

Implementation Actions

  • Automate joiner/mover/leaver flow.
  • Review dormant/shared accounts.
  • Approve and log privileged account changes.

Evidence Examples

  • Lifecycle workflow records
  • Account review reports
  • Privileged account approvals

Suggested Metrics

  • Dormant account count
  • Deprovisioning SLA attainment