Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
AlmaLinux OS 9 must disable account identifiers (individuals, groups, roles, and devices) after 35 days of inactivity.
Description
Discussion Text
Inactive identifiers pose a risk to systems and applications because attackers may exploit an inactive identifier and potentially obtain undetected access to the system.
Automatically disabling inactive accounts ensures that accounts which may not have been responsibly removed are not available to threat actors who may have compromised their credentials.
Owners of inactive accounts will not notice if unauthorized access to their user account has been obtained.
Automatically disabling inactive accounts ensures that accounts which may not have been responsibly removed are not available to threat actors who may have compromised their credentials.
Owners of inactive accounts will not notice if unauthorized access to their user account has been obtained.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.