This standard defines the requirements for managing system administrative accounts, including
oversight, monitoring, and audit controls to manage potential security and business risks
associated with unauthorized access or misuse of these accounts.
This standard supports Information Security Management Directives (ISMD) Sections 2.1.2 and
2.1.16 (Protect).