PR.AA-03 Users, services, and hardware are authenticated

Statement

Users, services, and hardware are authenticated

Example

Require multifactor authentication

Example

Enforce policies for the minimum strength of passwords, PINs, and similar authenticators

Example

Periodically reauthenticate users, services, and hardware based on risk (e.g., in zero trust architectures)

Example

Ensure that authorized personnel can access accounts essential for protecting safety under emergency conditions

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

3. Relaterede reguleringer

Linkede sager

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final