Identification and Authentication (IA)

Overview:The information system uniquely identifies and authenticates non-organizational users (or processes acting on behalf of non-organizational users). Supplemental Guidance:Non-organizational users include information system users other than... Read More

Overview:The organization manages information system identifiers by:a. Receiving authorization from [Assignment: organization-defined personnel or roles] to assign an individual, group, role, or device identifier;b. Selecting an identifier that... Read More

Overview:The organization manages individual identifiers by uniquely identifying each individual as [Assignment: organization-defined characteristic identifying individual status]. Supplemental Guidance:Characteristics identifying the status of... Read More

Overview:The organization requires that the registration process to receive [Assignment: organization- defined types of and/or specific authenticators] be conducted [Selection: in person; by a trusted third party] before [Assignment: organization... Read More

Overview:The organization tests the incident response capability for the information system [Assignment: organization-defined frequency] using [Assignment: organization-defined tests] to determine the incident response effectiveness and documents the... Read More

Overview:The information system implements multifactor authentication for local access to privileged accounts. Supplemental Guidance: Related control: AC-6. Action Items:1) Implement MFA for local access to privileged accounts   Related Documents:1)... Read More

Overview:The information system implements multifactor authentication for network access to non- privileged accounts. Action Items:1) Implement MFA for network access to non-privileged accounts   Related Documents:1) Identity and Access Management... Read More

Overview:The information system implements multifactor authentication for network access to privileged accounts. Supplemental Guidance: Related control: AC-6. Action Items:1) Implement MFA for network access to privileged accounts   Related... Read More

Overview:The information system implements replay-resistant authentication mechanisms for network access to privileged accounts. Supplemental Guidance:Authentication processes resist replay attacks if it is impractical to achieve successful... Read More

Overview:The organization ensures that unencrypted static authenticators are not embedded in applications or access scripts or stored on function keys. Supplemental Guidance:Organizations exercise caution in determining whether embedded or stored... Read More