Assessment Objective
Determine if:
- AC-07(04)(a) [Assignment: authentication factors] that are different from the primary authentication factors are allowed to be used after the number of organization-defined consecutive invalid logon attempts have been exceeded;
- AC-07(04)(b) a limit of [Assignment: number] consecutive invalid logon attempts through the use of the alternative factors by the user during a [Assignment: time period] is enforced.
Assessment Methods
Examine
- Access control policy
- procedures addressing unsuccessful logon attempts for primary and alternate authentication factors
- system design documentation
- system configuration settings and associated documentation
- system audit records
- system security plan
- other relevant documents or records
Interview
- System/network administrators
- organizational personnel with information security responsibilities
Test
- Mechanisms implementing access control policy for unsuccessful logon attempts
Gekoppelde issues
| Koppelingstype | Issue |
|---|---|
| blocks | AC-07(04) Use of Alternate Authentication Factor |