PR.AA-03 Users, services, and hardware are authenticated

Statement

Users, services, and hardware are authenticated

Guidance

Require multifactor authentication

Guidance

Enforce policies for the minimum strength of passwords, PINs, and similar authenticators

Guidance

Periodically reauthenticate users, services, and hardware based on risk (e.g., in zero trust architectures)

Guidance

Ensure that authorized personnel can access accounts essential for protecting safety under emergency conditions

1. Översikt

1.1 Referenser

• 11.6 Authentication
• 11.7 Multi-factor authentication

1.2 Identifierade krav

1.3 Relaterade regleringar

2. Identifierade krav

3. Relaterade regleringar

Länkade ärenden

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final