Skip to main content

💼 IA-8 IDENTIFICATION AND AUTHENTICATION (NON-ORGANIZATIONAL USERS)

  • ID: /frameworks/nist-sp-800-53-r4/ia/08

Description​

The information system uniquely identifies and authenticates non-organizational users (or processes acting on behalf of non-organizational users).

Similar​

  • Internal
    • ID: dec-c-c29379c1

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 NIST CSF v1.1 → 💼 PR.AC-1: Identities and credentials are issued, managed, verified, revoked, and audited for authorized devices, users and processes1934no data
💼 NIST CSF v1.1 → 💼 PR.AC-6: Identities are proofed and bound to credentials and asserted in interactions413no data
💼 NIST CSF v1.1 → 💼 PR.AC-7: Users, devices, and other assets are authenticated (e.g., single-factor, multi-factor) commensurate with the risk of the transaction (e.g., individuals' security and privacy risks and other organizational risks)1923no data

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 IA-8 (1) ACCEPTANCE OF PIV CREDENTIALS FROM OTHER AGENCIESno data
💼 IA-8 (2) ACCEPTANCE OF THIRD-PARTY CREDENTIALSno data
💼 IA-8 (3) USE OF FICAM-APPROVED PRODUCTSno data
💼 IA-8 (4) USE OF FICAM-ISSUED PROFILESno data
💼 IA-8 (5) ACCEPTANCE OF PIV-I CREDENTIALSno data