Ensure Dormant Accounts and Orphaned Identities Are Automatically Detected and Disabled

Trung bìnhCấp 2Xem xét thủ côngoracle-saas

Mô tả

Dormant accounts and orphaned identities should be detected and disabled using automated identity governance capabilities. Policies should be configured in OCI Identity Domains or integrated identity governance platforms to automatically flag and disable accounts that have not logged in within a defined period, or ... Automated detection and disabling reduces reliance on manual reviews, minimizes human error, and ensures consistent enforcement. This strengthens the organization's security posture and reduces the window of opportunity ... Reported as a manual review item: these Fusion/EPM/OCI IAM settings are reviewed in the Oracle SaaS and OCI consoles or reports.

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

1. Verify that identity governance policies are configured to automatically detect dormant and orphaned accounts. 2. Review policy logs to confirm detection and disabling actions have occurred. 3. Check for exceptions or exclusions and validate that they are documented and approved.

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

1. Implement identity governance tooling in OCI Identity Domains or an integrated IAM solution. 2. Configure policies to flag accounts inactive for more than 90 days or lacking ownership/role assignments. 3. Set policies to disable such accounts automatically while notifying administrators. 4. Define exceptions for service accounts and apply compensating monitoring controls. 5. Periodically review policy effectiveness and adjust thresholds as needed.

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: oracle-saasidentity
Tham chiếu: CIS Oracle SaaS Cloud Applications Benchmark v1.0.0 - 1.13 Ensure Dormant Accounts and Orphaned Identities Are Automatically Detected and Disabled