Skip to main content

💼 IA-2 IDENTIFICATION AND AUTHENTICATION (ORGANIZATIONAL USERS)

  • ID: /frameworks/nist-sp-800-53-r4/ia/02

Description​

The information system uniquely identifies and authenticates organizational users (or processes acting on behalf of organizational users).

Similar​

  • Internal
    • ID: dec-c-6ecbf78d

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 NIST CSF v1.1 → 💼 PR.AC-1: Identities and credentials are issued, managed, verified, revoked, and audited for authorized devices, users and processes1934no data
💼 NIST CSF v1.1 → 💼 PR.AC-6: Identities are proofed and bound to credentials and asserted in interactions413no data
💼 NIST CSF v1.1 → 💼 PR.AC-7: Users, devices, and other assets are authenticated (e.g., single-factor, multi-factor) commensurate with the risk of the transaction (e.g., individuals' security and privacy risks and other organizational risks)1923no data

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 IA-2 (1) NETWORK ACCESS TO PRIVILEGED ACCOUNTSno data
💼 IA-2 (2) NETWORK ACCESS TO NON-PRIVILEGED ACCOUNTSno data
💼 IA-2 (3) LOCAL ACCESS TO PRIVILEGED ACCOUNTSno data
💼 IA-2 (4) LOCAL ACCESS TO NON-PRIVILEGED ACCOUNTSno data
💼 IA-2 (5) GROUP AUTHENTICATIONno data
💼 IA-2 (6) NETWORK ACCESS TO PRIVILEGED ACCOUNTS - SEPARATE DEVICEno data
💼 IA-2 (7) NETWORK ACCESS TO NON-PRIVILEGED ACCOUNTS - SEPARATE DEVICEno data
💼 IA-2 (8) NETWORK ACCESS TO PRIVILEGED ACCOUNTS - REPLAY RESISTANTno data
💼 IA-2 (9) NETWORK ACCESS TO NON-PRIVILEGED ACCOUNTS - REPLAY RESISTANTno data
💼 IA-2 (10) SINGLE SIGN-ONno data
💼 IA-2 (11) REMOTE ACCESS - SEPARATE DEVICEno data
💼 IA-2 (12) ACCEPTANCE OF PIV CREDENTIALSno data
💼 IA-2 (13) OUT-OF-BAND AUTHENTICATIONno data

Policies (2)​

PolicyLogic CountFlagsCompliance
🛡️ AWS S3 Bucket MFA Delete is not enabled🟠🟢1🟠 x1, 🟢 x6no data
🛡️ Google Accounts are not configured with MFA🟢⚪🟢 x2, ⚪ x1no data

Internal Rules​

RulePoliciesFlags
✉️ dec-z-bb7312921