+IA Control Guidance
---+IA-2 FedRAMP Control Guidance
---+IA-2(1) FedRAMP Control Guidance
---+IA-2(2) FedRAMP Control Guidance
---+IA-2(8) FedRAMP Control Guidance
---+IA-5 FedRAMP Control Guidance
---+IA-2(6) FedRAMP Control Guidance
---+IA-4(4) FedRAMP Control Guidance

IA Control Guidance

1. Přehled

IA-2 FedRAMP Control Guidance

Guidance

Multi-factor authentication must be phishing-resistant. In accordance with current CISA Guidance. Current CISA guidance can be found here: https://www.cisa.gov/sites/default/files/publications/fact-sheet-implementing-phishing-resistant-mfa-508c.pdf
IA-2(1) FedRAMP Control Guidance

Guidance

Multi-factor authentication must be phishing-resistant. In accordance with current CISA Guidance. Current CISA guidance can be found here: https://www.cisa.gov/sites/default/files/publications/fact-sheet-implementing-phishing-resistant-mfa-508c.pdf
IA-2(2) FedRAMP Control Guidance

Guidance

Multi-factor authentication must be phishing-resistant. In accordance with current CISA Guidance. Current CISA guidance can be found here: https://www.cisa.gov/sites/default/files/publications/fact-sheet-implementing-phishing-resistant-mfa-508c.pdf
IA-2(8) FedRAMP Control Guidance

Parameters

  • ia-02.08_odp: privileged accounts; non-privileged accounts
IA-5 FedRAMP Control Guidance

Class B

Guidance

Authenticators must be compliant with the most recent NIST Digital Identity Guidelines IAL, AAL, FAL level 1.

IA-5 Guidance: FedRAMP requires that authentication assertions be encrypted when passed through third parties, such as a browser. For example, a SAML assertion can be encrypted using XML-Encryption, or an OpenID Connect ID Token can be encrypted using JSON Web Encryption (JWE).

Class C

Guidance

Authenticators must be compliant with the most recent NIST Digital Identity Guidelines IAL, AAL, FAL level 2.

IA-5 Guidance: FedRAMP requires that authentication assertions be encrypted when passed through third parties, such as a browser. For example, a SAML assertion can be encrypted using XML-Encryption, or an OpenID Connect ID Token can be encrypted using JSON Web Encryption (JWE).

Class D

Guidance

Authenticators must be compliant with the most recent NIST Digital Identity Guidelines IAL, AAL, FAL level 3.

IA-5 Guidance: FedRAMP requires that authentication assertions be encrypted when passed through third parties, such as a browser. For example, a SAML assertion can be encrypted using XML-Encryption, or an OpenID Connect ID Token can be encrypted using JSON Web Encryption (JWE).
IA-2(6) FedRAMP Control Guidance

Parameters

  • ia-02.06_odp.01: local, network and remote
  • ia-02.06_odp.02: privileged accounts; non-privileged accounts
IA-4(4) FedRAMP Control Guidance

Parameters

  • ia-04.04_odp: contractors; foreign nationals

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace
  • FedRAMP Consolidated Rules -

    EN: FedRAMP® Consolidated Rules of the Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, from their machine-readable version (FedRAMP/rules). Works of the U.S. Government are not subject to copyright protection in the United States (17 U.S.C. § 105; GSA website policies); GSA dedicated its machine-readable FedRAMP content to the public domain worldwide (CC0 1.0). FedRAMP® is a registered trademark of GSA; GRCA is not affiliated with, nor endorsed by, GSA or FedRAMP. Divided into sections and converted into the GRCA format, the wording unchanged, linked to the NIST SP 800-53 controls they name. Only the version published by FedRAMP is authoritative.

    DE: FedRAMP® Consolidated Rules des Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, aus ihrer maschinenlesbaren Fassung (FedRAMP/rules). Werke der US-Regierung sind in den USA urheberrechtlich nicht geschützt (17 U.S.C. § 105; Website-Richtlinien der GSA); die GSA hat ihre maschinenlesbaren FedRAMP-Inhalte weltweit gemeinfrei gestellt (CC0 1.0). FedRAMP® ist eine eingetragene Marke der GSA; GRCA steht in keiner Verbindung zur GSA oder zu FedRAMP und wird von ihnen nicht unterstützt. In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert, mit den genannten Controls aus NIST SP 800-53 verknüpft. Maßgeblich ist allein die von FedRAMP veröffentlichte Fassung.