Skip to main content

💼 IA-2 Identification and Authentication (organizational Users)

Description​

Uniquely identify and authenticate organizational users and associate that unique identification with processes acting on behalf of those users.

Similar​

  • Sections
    • /frameworks/aws-fsbp-v1.0.0/dms/10
    • /frameworks/aws-fsbp-v1.0.0/dms/11
  • Internal
    • ID: dec-c-bd9069ea

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [DMS.10] DMS endpoints for Neptune databases should have IAM authorization enabled
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [DMS.11] DMS endpoints for MongoDB should have an authentication mechanism enabled

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 FedRAMP High Security Controls → 💼 IA-2 Identification and Authentication (Organizational Users) (L)(M)(H)613
💼 FedRAMP Low Security Controls → 💼 IA-2 Identification and Authentication (Organizational Users) (L)(M)(H)42
💼 NIST CSF v2.0 → 💼 PR.AA-01: Identities and credentials for authorized users, services, and hardware are managed by the organization23
💼 NIST CSF v2.0 → 💼 PR.AA-03: Users, services, and hardware are authenticated22

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
💼 IA-2(1) Identification and Authentication (organizational Users) _ Multi-factor Authentication to Privileged Accounts2
💼 IA-2(2) Identification and Authentication (organizational Users) _ Multi-factor Authentication to Non-privileged Accounts2
💼 IA-2(3) Identification and Authentication (organizational Users) _ Local Access to Privileged Accounts
💼 IA-2(4) Identification and Authentication (organizational Users) _ Local Access to Non-privileged Accounts
💼 IA-2(5) Identification and Authentication (organizational Users) _ Individual Authentication with Group Authentication
💼 IA-2(6) Identification and Authentication (organizational Users) _ Access to Accounts —separate Device2
💼 IA-2(7) Identification and Authentication (organizational Users) _ Network Access to Non-privileged Accounts — Separate Device
💼 IA-2(8) Identification and Authentication (organizational Users) _ Access to Accounts — Replay Resistant2
💼 IA-2(9) Identification and Authentication (organizational Users) _ Network Access to Non-privileged Accounts — Replay Resistant
💼 IA-2(10) Identification and Authentication (organizational Users) _ Single Sign-on
💼 IA-2(11) Identification and Authentication (organizational Users) _ Remote Access — Separate Device
💼 IA-2(12) Identification and Authentication (organizational Users) _ Acceptance of PIV Credentials
💼 IA-2(13) Identification and Authentication (organizational Users) _ Out-of-band Authentication