Organizational Users Group Authentication IA-2(5)

Overview:
The organization requires individuals to be authenticated with an individual authenticator when a group authenticator is employed.

Supplemental Guidance:
Requiring individuals to use individual authenticators as a second level of authentication helps organizations to mitigate the risk of using group authenticators.

Action Items:
1) Ensure all individual are authenticated with an individual authenticator

Related Documents:
1) Identity and Access Management Policy

Additional Guidance:
Moderate FedRAMP-Defined Assignment / Selection Parameters
none

Moderate Additional FedRAMP Requirements and Guidance
none