16.6: Maintain an Inventory of Accounts

Maintain an inventory of all accounts organized by authentication system.

Asset Type	Security Function	Implementation Groups
Users	Identify	2, 3

Dependencies

• Sub-control 16.1: Inventory of Authentication Systems

Inputs

1. Authentication System Inventory

2. The organization’s current account inventory (the “to be checked” inventory)

Operations

1. For each authentication system in Input 1, enumerate the accounts under that authentication system. This ground truth list of accounts organized by authentication system becomes M1.

2. Compare the accounts listed in M1 to the accounts listed in the current account inventory (Input 2).

3. Create a list of the correct accounts in Input 2 (which will be M2)

4. Create a list of the incorrect accounts in Input 2 (which will be M3).

Measures

• M1 = Ground truth account inventory

• M2 = List of correct accounts from the current (to be checked) inventory

• M3 = List of incorrect accounts from the current (to be checked) inventory

• M4 = Count of accounts in the ground truth account inventory (count of M1)

• M5 = Count of correct accounts in the current (to be checked) account inventory (count of M2)

Metrics

Metric	Calculate the accuracy of current (to be checked) account inventory
Calculation	M5 / M4