+IA-02(05) Individual Authentication with Group Authentication

IA-02(05) Individual Authentication with Group Authentication

Control

When shared accounts or authenticators are employed, require users to be individually authenticated before granting access to the shared accounts or resources.

Discussion

Individual authentication prior to shared group authentication mitigates the risk of using group accounts or authenticators.

Assessment Objective

users are required to be individually authenticated before granting access to the shared accounts or resources when shared accounts or authenticators are employed.

Assessment Method

Examine

Identification and authentication policy system security plan procedures addressing user identification and authentication system design documentation system configuration settings and associated documentation system audit records list of system accounts other relevant documents or records

Interview

Organizational personnel with system operations responsibilities organizational personnel with account management responsibilities organizational personnel with information security responsibilities system/network administrators system developers

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
is blocked by IA-02(05) Individual Authentication with Group Authentication – Assessment Procedure
is blocked by Group Authentication