Control: ism-1843; Revision: 0; Updated: Mar-23; Applicability: ALL; Essential Eight: N/A ​

User accounts with unconstrained delegation are reviewed at least annually, and those without an associated Kerberos SPN or demonstrated business requirement are removed.