+IA-03(01) Cryptographic Bidirectional Authentication

IA-03(01) Cryptographic Bidirectional Authentication

Control

Authenticate [Assignement: devices and/or types of devices] before establishing [Selection(one-or-more): local; remote; network] connection using bidirectional authentication that is cryptographically based.

Discussion

A local connection is a connection with a device that communicates without the use of a network. A network connection is a connection with a device that communicates through a network. A remote connection is a connection with a device that communicates through an external network. Bidirectional authentication provides stronger protection to validate the identity of other devices for connections that are of greater risk.

Assessment Objective

[Assignement: devices and/or types of devices] are authenticated before establishing [Selection(one-or-more): local; remote; network] connection using bidirectional authentication that is cryptographically based.

Assessment Method

Examine

Identification and authentication policy system security plan procedures addressing device identification and authentication system design documentation list of devices requiring unique identification and authentication device connection reports system configuration settings and associated documentation other relevant documents or records

Interview

Organizational personnel with operational responsibilities for device identification and authentication organizational personnel with information security responsibilities system/network administrators system developers

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
is blocked by IA-03(01) Cryptographic Bidirectional Authentication – Assessment Procedure
is blocked by Identification & Authentication for Devices