STIGhubSTIGhub
STIGsRMF ControlsCompare

STIGhub

A free tool to search and browse the entire DISA STIG library. Saves up to 75% in security compliance research time.

Navigation

  • Browse STIGs
  • Search
  • RMF Controls
  • Compare Versions

Resources

  • About
  • Release Notes
  • VPAT
  • DISA STIG Library
STIGs updated 3 hours ago
Powered by Pylon
© 2026 Beacon Cloud Solutions, Inc. All rights reserved.
← Back to Database Security Requirements Guide

V-263603

CAT II (Medium)

The DBMS must disable accounts when the accounts are no longer associated to a user.

Rule ID

SV-263603r982481_rule

STIG

Database Security Requirements Guide

Version

V4R5

CCIs

CCI-003628

Discussion

Disabling expired, inactive, or otherwise anomalous accounts supports the concepts of least privilege and least functionality, which reduce the attack surface of the system.

Check Content

Verify the DBMS is configured to disable accounts when the accounts are no longer associated to a user.

If the DBMS is not configured to disable accounts when the accounts are no longer associated to a user, this is a finding.

Fix Text

Configure the DBMS to disable accounts when the accounts are no longer associated to a user.