Requirement
"The full life cycle of identities shall be managed."[1]
Explanation
Organizations should ensure that user accounts/identities are uniquely assigned. Shared accounts should be avoided and only used when there is no technical work around and a strong business need. System or service accounts must be approved by IT management. When an account is no longer required it shall be promptly disabled or deleted. Systems should also log changes made to user accounts/identities.
