Access & Credential Revocation
This section covers FISMA metrics around access & credential revocation (2.13, 2.14, and 2.15).
Access Revocation for Federal Employees and Contractors
2.13 | Average time (in days) to revoke role-based privileges from Federal employees once it has been determined they are no longer needed. |
2.14 | Average time (in days) to revoke role-based privileges from contractors once it has been determined they are no longer needed. |
Why are Metrics 2.13 and 2.14 important?
It’s important to remove inappropriate access from individuals as quickly as possible to avoid risk to an organization’s information systems.Credential Revocation
2.15 | Average time (in days) to revoke role-based credentials from all other credential holders once it has been determined they are no longer needed. |