Dormant accounts refer to user or system accounts that have been inactive for 45 days, as recommended in <a href="https://www.cisecurity.org/controls/cis-controls-navigator" target="_blank" rel="noopener">CIS Control 5.3</a>. They pose a potential security risk as they could be exploited if their security credentials were compromised.