Unprivileged Accounts and Users

This section covers FISMA metrics around unprivileged accounts and users (2.6, 2.6.1, 2.6.2, 2.4, 2.4.1, and 2.4.2).

2.6	Number of unprivileged network accounts assigned to users. (Exclude privileged network accounts and non-user accounts.)
2.6.1	Number of unprivileged shared network accounts. (Exclude privileged network accounts and non-user accounts.)
2.6.2	Number of individual users assigned to unprivileged shared network accounts (from 2.6.1.)
2.4	Number of users with unprivileged network accounts. (Exclude privileged network accounts and non-user accounts.)

You'll use the user information found here again for the next two metrics.

2.4.1	Number of users (from 2.4) technologically required to log onto the network with a two-factor PIV card or other NIST Level of Assurance (LOA) 4 credential.
2.4.2	Number of users (from 2.4) allowed to use username and password as their primary method for network authentication.