Requirement:

The asset owner shall have policies and procedures to verify that IACS-specific user identifiers, authenticators, roles and their associated access rights that are used to support essential IACS operations, including operator accounts, are configured so they are not disabled automatically.

Guidance: