The Central Log Server must require users to be individually authenticated before granting access to the shared accounts or resources.

Individual authentication prior to shared group authentication mitigates the risk of using group accounts or authenticators.

Verify the Central Log Server is configured to require users to be individually authenticated before granting access to the shared accounts or resources.

If the Central Log Server is not configured to require users to be individually authenticated before granting access to the shared accounts or resources, this is a finding.

Configure the Central Log Server to require users to be individually authenticated before granting access to the shared accounts or resources.