+IA-02(05) Individual Authentication with Group Authentication

IA-02(05) Individual Authentication with Group Authentication

Control

When shared accounts or authenticators are employed, require users to be individually authenticated before granting access to the shared accounts or resources.

Discussion

Individual authentication prior to shared group authentication mitigates the risk of using group accounts or authenticators.

Assessment Objective

users are required to be individually authenticated before granting access to the shared accounts or resources when shared accounts or authenticators are employed.

Assessment Method

Examine

Identification and authentication policy system security plan procedures addressing user identification and authentication system design documentation system configuration settings and associated documentation system audit records list of system accounts other relevant documents or records

Interview

Organizational personnel with system operations responsibilities organizational personnel with account management responsibilities organizational personnel with information security responsibilities system/network administrators system developers

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
is blocked by IA-02(05) Individual Authentication with Group Authentication – Assessment Procedure
is blocked by Group Authentication