💼 IA-1 IDENTIFICATION AND AUTHENTICATION POLICY AND PROCEDURES

• Contextual name: 💼 IA-1 IDENTIFICATION AND AUTHENTICATION POLICY AND PROCEDURES
• ID: /frameworks/nist-sp-800-53-r4/ia/01
• Located in: 💼 IA IDENTIFICATION AND AUTHENTICATION

Description

The organization: IA-1a. Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]: IA-1a.1. An identification and authentication policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and IA-1a.2. Procedures to facilitate the implementation of the identification and authentication policy and associated identification and authentication controls; and IA-1b. Reviews and updates the current: IA-1b.1. Identification and authentication policy [Assignment: organization-defined frequency]; and IA-1b.2. Identification and authentication procedures [Assignment: organization-defined frequency].

Similar

• Internal
  • ID: dec-c-81e608ff

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 NIST CSF v1.1 → 💼 ID.GV-1: Organizational cybersecurity policy is established and communicated
💼 NIST CSF v1.1 → 💼 ID.GV-3: Legal and regulatory requirements regarding cybersecurity, including privacy and civil liberties obligations, are understood and managed		2	2
💼 NIST CSF v1.1 → 💼 PR.AC-1: Identities and credentials are issued, managed, verified, revoked, and audited for authorized devices, users and processes		19	22
💼 NIST CSF v1.1 → 💼 PR.AC-6: Identities are proofed and bound to credentials and asserted in interactions		4	8
💼 NIST CSF v1.1 → 💼 PR.AC-7: Users, devices, and other assets are authenticated (e.g., single-factor, multi-factor) commensurate with the risk of the transaction (e.g., individuals' security and privacy risks and other organizational risks)		19	22

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags