Skip to main content

💼 IA-4 Identifier Management

Description​

Manage system identifiers by: a. Receiving authorization from [Assignment: organization-defined personnel or roles] to assign an individual, group, role, service, or device identifier; b. Selecting an identifier that identifies an individual, group, role, service, or device; c. Assigning the identifier to the intended individual, group, role, service, or device; and d. Preventing reuse of identifiers for [Assignment: organization-defined time period].

Similar​

  • Internal
    • ID: dec-c-6af6be71

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 FedRAMP High Security Controls → 💼 IA-4 Identifier Management (L)(M)(H)111
💼 FedRAMP Low Security Controls → 💼 IA-4 Identifier Management (L)(M)(H)1
💼 NIST CSF v2.0 → 💼 PR.AA-01: Identities and credentials for authorized users, services, and hardware are managed by the organization38

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
💼 IA-4(1) Identifier Management _ Prohibit Account Identifiers as Public Identifiers
💼 IA-4(2) Identifier Management _ Supervisor Authorization
💼 IA-4(3) Identifier Management _ Multiple Forms of Certification
💼 IA-4(4) Identifier Management _ Identify User Status
💼 IA-4(5) Identifier Management _ Dynamic Management
💼 IA-4(6) Identifier Management _ Cross-organization Management
💼 IA-4(7) Identifier Management _ In-person Registration
💼 IA-4(8) Identifier Management _ Pairwise Pseudonymous Identifiers
💼 IA-4(9) Identifier Management _ Attribute Maintenance and Protection