PR.AA-03 Users, services, and hardware are authenticated

Statement

Users, services, and hardware are authenticated

Guidance

Require multifactor authentication

Guidance

Enforce policies for the minimum strength of passwords, PINs, and similar authenticators

Guidance

Periodically reauthenticate users, services, and hardware based on risk (e.g., in zero trust architectures)

Guidance

Ensure that authorized personnel can access accounts essential for protecting safety under emergency conditions

1. Επισκόπηση

1.1 Παραπομπές

• 11.6 Authentication
• 11.7 Multi-factor authentication

1.2 Εντοπισμένες απαιτήσεις

1.3 Σχετικοί κανονισμοί

2. Εντοπισμένες απαιτήσεις

3. Σχετικοί κανονισμοί

Συνδεδεμένα ζητήματα

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final