(background) Windows Account Life Cycle Events (ALCE)

These events track the creation of new accounts, as well as account modifications, deletions, disables, and enables. These events all have unique event IDs, record the changed account, and identify the user who made the change. Account management should be handled by a dedicated account management team, with a request and authorization process in place. Also, keep in mind that any Windows system other than a domain controller can have and use local accounts. This is a standard requirement for the majority of IT General Controls programs (ITGC).

Problem Statement

[Describe the business objective, process, and problem that this use case will

address here. The problems statement should clearly define and identify the

issue, and provide direction to achieve a solution. Ideally, it expresses a solvable

problem]

<

initial draft identifies the issue at hand and needs to be solved by the SOC

Developer. Refine the problem statement and make sure that it sets sufficient

direction to solve the problem, can be measured, will keep the implementer on

track, and can be validated at the other end. If you have difficulty, make sure

you answer the "5 Ws". >