+APP.3.1.A1 Authentication (B)

APP.3.1.A1 Authentication (B)

The IT Operation Department MUST configure web applications and web services in such a way that users have to authenticate themselves to access protected resources. An appropriate authentication method MUST be selected for this purpose. The selection process SHOULD be documented.

The IT Operation Department MUST define appropriate thresholds for failed login attempts.

1. Resumen

1.1 Referencias

1.2 Requisitos identificados

1.3 Regulaciones relacionadas

2. Requisitos identificados

Requisitos

3. Regulaciones relacionadas

Regulaciones

Incidencias vinculadas

Vínculos
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.36 Identity theft