Assessment Objective

Determine if:

• IA-03 [Assignment: devices and/or types of devices] are uniquely identified and authenticated before establishing a [Selection (one or more): local; remote; network] connection.

Assessment Methods

Examine

• Identification and authentication policy
• system security plan
• procedures addressing device identification and authentication
• system design documentation
• list of devices requiring unique identification and authentication
• device connection reports
• system configuration settings and associated documentation
• other relevant documents or records

Interview

• Organizational personnel with operational responsibilities for device identification and authentication
• organizational personnel with information security responsibilities
• system/network administrators
• system developers

Test

• Mechanisms supporting and/or implementing device identification and authentication capabilities

Incidencias vinculadas

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final