+IA-02(02) [M] Multi-factor Authentication to Non-privileged Accounts

IA-02(02) [M] Multi-factor Authentication to Non-privileged Accounts

Control

Implement multi-factor authentication for access to non-privileged accounts.

Discussion

Multi-factor authentication requires the use of two or more different factors to achieve authentication. The authentication factors are defined as follows: something you know (e.g., a personal identification number [PIN]), something you have (e.g., a physical authenticator such as a cryptographic private key), or something you are (e.g., a biometric). Multi-factor authentication solutions that feature physical authenticators include hardware authenticators that provide time-based or challenge-response outputs and smart cards such as the U.S. Government Personal Identity Verification card or the DoD Common Access Card. In addition to authenticating users at the system level, organizations may also employ authentication mechanisms at the application level, at their discretion, to provide increased information security. Regardless of the type of access (i.e., local, network, remote), non-privileged accounts are authenticated using multi-factor options appropriate for the level of risk. Organizations can provide additional security measures, such as additional or more rigorous authentication mechanisms, for specific types of access.

Assessment Objective

multi-factor authentication for access to non-privileged accounts is implemented.

Assessment Method

Examine

Identification and authentication policy system security plan procedures addressing user identification and authentication system design documentation system configuration settings and associated documentation system audit records list of system accounts other relevant documents or records

Interview

Organizational personnel with system operations responsibilities organizational personnel with account management responsibilities organizational personnel with information security responsibilities system/network administrators system developers

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
is blocked by IA-02(02) [M] Multi-factor Authentication to Non-privileged Accounts – Assessment Procedure
is blocked by Hardware Token-Based Authentication
is blocked by Multi-Factor Authentication (MFA)
is blocked by Out-of-Band (OOB) Multi-Factor Authentication (MFA)
is blocked by Multi-Factor Authentication (MFA) For Network Access to Non-Privileged Accounts
is blocked by Information Assurance Enabled Products