03.05.01E Cryptographic Bidirectional Authentication

Statement

Authenticate {{ insert: param, A.03.05.01E.ODP.01 }} before establishing a system connection using bidirectional authentication that is cryptographically based.

Guidance

Bidirectional authentication provides stronger protection to validate the identity of other devices for connections that are of greater risk. This requirement enhances SP 800-171 requirement 03.05.02.

Statement

• (includes preempt and negate) Ensure that the threat event does not have an impact.

  • Reduce likelihood of occurrence and/or reduce likelihood of impact.

  • The adversary’s efforts or resources cannot be applied or are wasted.

• (includes exert) Make it more difficult for threat events to cause adverse impacts or consequences.

  • Reduce likelihood of impact and reduce level of impact.

  • Adversary activities are restricted in scope, fail to achieve full effect, do not take place in accordance with adversary timeline, or require greater resources than adversary had planned.

• (includes detect) Reduce risk due to ignorance of threat events and possible replicated or similar threat events in the same or similar environments.

  • Reduce likelihood of impact.

  • The adversary loses the advantage of stealth as defenders are better prepared by developing and sharing threat intelligence.

Assessment objective

{{ insert: param, A.03.05.01E.ODP.01 }} are authenticated before establishing a system connection using bidirectional authentication that is cryptographically based.

Assessment method

• Identification and authentication policy system security plan procedures addressing device identification and authentication system design documentation configuration settings and associated documentation list of devices requiring unique identification and authentication device connection reports other relevant documents or records

Assessment method

• Personnel with operational responsibilities for device identification and authentication personnel with information security responsibilities system/network administrators system developers

Assessment method

• Mechanisms supporting and/or implementing device authentication capabilities cryptographically based bidirectional authentication mechanisms

1. Ħarsa ġenerali

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

3. Regolamenti relatati

Kwistjonijiet marbuta

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final