PR.AA-03 Users, services, and hardware are authenticated

Statement

Users, services, and hardware are authenticated

Guidance

Require multifactor authentication

Guidance

Enforce policies for the minimum strength of passwords, PINs, and similar authenticators

Guidance

Periodically reauthenticate users, services, and hardware based on risk (e.g., in zero trust architectures)

Guidance

Ensure that authorized personnel can access accounts essential for protecting safety under emergency conditions

1. Преглед

1.1 Препратки

• 11.6 Authentication
• 11.7 Multi-factor authentication

1.2 Идентифицирани изисквания

1.3 Свързани регулации

2. Идентифицирани изисквания

3. Свързани регулации

Свързани задачи

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final