+IA-05(06) Protection of Authenticators

IA-05(06) Protection of Authenticators

Control

Protect authenticators commensurate with the security category of the information to which use of the authenticator permits access.

Discussion

For systems that contain multiple security categories of information without reliable physical or logical separation between categories, authenticators used to grant access to the systems are protected commensurate with the highest security category of information on the systems. Security categories of information are determined as part of the security categorization process.

Assessment Objective

authenticators are protected commensurate with the security category of the information to which use of the authenticator permits access.

Assessment Method

Examine

Identification and authentication policy procedures addressing authenticator management security categorization documentation for the system security assessments of authenticator protections risk assessment results system security plan other relevant documents or records

Interview

Organizational personnel with authenticator management responsibilities organizational personnel implementing and/or maintaining authenticator protections organizational personnel with information security responsibilities system/network administrators

1. Przegląd

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

Wymagania

3. Powiązane regulacje

Regulacje

Powiązane zgłoszenia

Powiązania
is blocked by IA-05(06) Protection of Authenticators – Assessment Procedure
is blocked by Protection of Authenticators
is blocked by User Responsibilities for Account Management