+AC-07(04) Use of Alternate Authentication Factor
|
AC-07(04) Use of Alternate Authentication Factor
Control
- Allow the use of [Assignement: authentication factors] that are different from the primary authentication factors after the number of organization-defined consecutive invalid logon attempts have been exceeded; and
- Enforce a limit of [Assignement: number] consecutive invalid logon attempts through use of the alternative factors by a user during a [Assignement: time period].
Discussion
The use of alternate authentication factors supports the objective of availability and allows a user who has inadvertently been locked out to use additional authentication factors to bypass the lockout.
Assessment Objective
- [Assignement: authentication factors] that are different from the primary authentication factors are allowed to be used after the number of organization-defined consecutive invalid logon attempts have been exceeded;
- a limit of [Assignement: number] consecutive invalid logon attempts through the use of the alternative factors by the user during a [Assignement: time period] is enforced.
Assessment Method
Examine
Access control policy
procedures addressing unsuccessful logon attempts for primary and alternate authentication factors
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
Interview
System/network administrators
organizational personnel with information security responsibilities
1. Przegląd
1.1 Odwołania
1.2 Zidentyfikowane wymagania
1.3 Powiązane regulacje
2. Zidentyfikowane wymagania
Wymagania
| Źródło |
Wymaganie |
3. Powiązane regulacje
Regulacje
| Źródło |
Regulacja |
Powiązane zgłoszenia
|