Trace one authority signal through its exact source, normalized catalog, retained method context, and required human decision. The signal stops wherever the record stops.
1,196 catalog units indexedNormalized catalog · SHA-256 bfae171ee609…aaacbcc7.
04
Reference method
3,715 assessment-objective nodes retained · inactive2,931 method parts and 2,931 object parts are preserved for reference; no runnable test set is activated by this catalog reader.
05
Human acceptance
Required · no conclusion recordedThe reference method may prepare a review record. A named reviewer retains conclusion authority.
A later station can exist as configuration without inheriting the authority of an earlier one. Only a connected path carries provenance; only a named reviewer can accept a conclusion.
The server returns at most 50 records per view. Refine the source query or family to inspect the remainder; the full catalog is never shipped to a browser bundle.
Field notebook · source record
AC-2(9)
Access Control
active
Restrictions on Use of Shared and Group Accounts
The statement below is source material, not a generated control summary.
01
Source statement
Only permit the use of shared and group accounts that meet {{ insert: param, ac-02.09_odp }}.
02
Guidance
Before permitting the use of shared or group accounts, organizations consider the increased risk due to the lack of accountability with such accounts.
03
Organization-defined parameters
Organization-defined · unresolvedCatalog reference only. No project value has been assigned or evaluated here.
ac-02.09_odp
conditions
Source guidance
conditions for establishing shared and group accounts are defined;
04
Assessment reference context
Retained, not activated.1 source assessment records and 1 objective nodes are available as reference context. This surface runs none of them.
ac-2.9_objAC-02(09)1 objective nodes
the use of shared and group accounts is only permitted if {{ insert: param, ac-02.09_odp }} are met.
05
Reference method and authority
InputExact release, source digest, control ID, and cited source fields
Agent taskPrepare a bounded evidence request or test-plan draft
Fail closedAbstain when source, scope, or assessment identity is missing
Human acceptanceA named reviewer decides whether evidence supports the conclusion