YouTube - NIST 800-171 Control 3.5.6 Disable identifiers after a defined period of inactivity.
In this edition of the On Call Compliance Solutions Compliance Tip of the Week, we discuss how inactive identifiers pose a risk to organizational information because attackers may exploit an inactive identifier to gain undetected access to organizational devices. The owners of the inactive accounts may not notice if unauthorized access to the account has been obtained. Let’s talk about NIST 800-171 Control 3.5.6 Disable identifiers after a defined period of inactivity.