Common use of Account Monitoring Clause in Contracts

Account Monitoring. 2.2.9.1 Access to a County network and its resources shall be strictly controlled, managed, and reviewed to ensure only authorized users gain access based on the privileges granted. (e.g., Kiosks provide physical and public access to County networks. These shall be secured to ensure County resources are not accessed by unauthorized users.) 2.2.9.2 The control mechanisms for all types of access to County IT resources by contractors, customers or vendors are to be documented. 2.2.9.3 Monitor account usage to determine dormant accounts that have not been used for a given period, such as 45 days, notifying the user or user’s manager of the dormancy. 2.2.9.4 After a longer period, such as 60 days, the account shall be disabled by the system when the technology is feasible or available. 2.2.9.5 On a periodic basis, such as quarterly or at least annually, departments shall require that managers match active employees and contractors with each account belonging to their managed staff. Security or system administrators shall then determine whether to disable accounts that are not assigned to active employees or contractors.

Account Monitoring. 2.2.9.1 Access to a County network and its resources shall be strictly controlled, managed, and reviewed to ensure only authorized users gain access based on the privileges granted. (e.g., Kiosks provide physical and public access to County networks. These shall be secured to ensure County resources are not accessed by unauthorized users.) 2.2.9.2 The control mechanisms for all types of access to County IT resources by contractors, contractors and customers or vendors are to be documented. 2.2.9.3 Monitor account usage to determine dormant accounts that have not been used for a given period, such as 45 days, notifying the user or user’s manager of the dormancy. 2.2.9.4 After a longer period, such as 60 days, the account shall be disabled by the system when the technology is feasible or available. 2.2.9.5 On a periodic basis, such as quarterly or at least annually, departments shall require that managers match active employees and contractors with each account belonging to their managed staff. Security or system administrators shall then determine whether to disable accounts that are not assigned to active employees or contractors.