PR.AA-03 Users, services, and hardware are authenticated

Statement

Users, services, and hardware are authenticated

Guidance

Require multifactor authentication

Guidance

Enforce policies for the minimum strength of passwords, PINs, and similar authenticators

Guidance

Periodically reauthenticate users, services, and hardware based on risk (e.g., in zero trust architectures)

Guidance

Ensure that authorized personnel can access accounts essential for protecting safety under emergency conditions

1. Vue d’ensemble

1.1 Références

• 11.6 Authentication
• 11.7 Multi-factor authentication

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

3. Réglementations associées

Tickets liés

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final