+APP.3.1.A1 Authentication (B)

APP.3.1.A1 Authentication (B)

The IT Operation Department MUST configure web applications and web services in such a way that users have to authenticate themselves to access protected resources. An appropriate authentication method MUST be selected for this purpose. The selection process SHOULD be documented.

The IT Operation Department MUST define appropriate thresholds for failed login attempts.

1. Översikt

1.1 Referenser

1.2 Identifierade krav

1.3 Relaterade regleringar

2. Identifierade krav

Krav

3. Relaterade regleringar

Regleringar

Länkade ärenden

Länkar
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.36 Identity theft