Assessment Objective
Determine if:
- IA-05(06) authenticators are protected commensurate with the security category of the information to which use of the authenticator permits access.
Assessment Methods
Examine
- Identification and authentication policy
- procedures addressing authenticator management
- security categorization documentation for the system
- security assessments of authenticator protections
- risk assessment results
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with authenticator management responsibilities
- organizational personnel implementing and/or maintaining authenticator protections
- organizational personnel with information security responsibilities
- system/network administrators
Test
- Mechanisms supporting and/or implementing authenticator management capability
- mechanisms protecting authenticators
Saincheisteanna nasctha
| Cineál naisc | Saincheist |
|---|---|
| blocks | IA-05(06) [M] Protection of Authenticators |