|
controlIA-3
Device Identification and Authentication (IA-3)
Uniquely identify and authenticate [organization-defined] before establishing a [organization-defined] connection.
Security Baselines
MODERATEHIGHLOW
identificationauthenticationidentity
Why These Connect
Maps To5
These are equivalent or closely aligned requirements in other frameworks.
Baselined In2
This control is included in the linked security baseline (LOW, MODERATE, or HIGH).
Supports34
These related controls work together — a change to one may affect the others.
Enhances4
These enhancements add specific capabilities or refinements to the base control.
Related Controls(20)
AC-17Remote Access (AC-17)
LMH
AC-18Wireless Access (AC-18)LMH
AC-19Access Control for Mobile Devices (AC-19)LMH
AU-2Event Logging (AU-2)LMH
AU-6Audit Record Review, Analysis, and Reporting (AU-6)LMH
CA-3Information Exchange (CA-3)LMH
CA-9Internal System Connections (CA-9)LMH
CM-3Configuration Change Control (CM-3)MH
CM-6Configuration Settings (CM-6)LMH
IA-4Identifier Management (IA-4)LMH
IA-5Authenticator Management (IA-5)LMH
IA-9Service Identification and Authentication (IA-9)IA-11Re-authentication (IA-11)LMH
IA-13Identity Providers and Authorization Servers (IA-13)SI-4System Monitoring (SI-4)LMH
IA-12Identity Proofing (IA-12)MH
PE-3Physical Access Control (PE-3)LMH
SC-8Transmission Confidentiality and Integrity (SC-8)MH
SC-12Cryptographic Key Establishment and Management (SC-12)LMH
SC-13Cryptographic Protection (SC-13)LMH
Cross-Framework Mappings(5)
PR.AA-01PR.AA-01Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
PR.AA-03PR.AA-03Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
HIPAAHIPAA Security Rule2 mappingsFinal
NIST OLIR informative reference — HIPAA Security Rule to SP 800-53 Rev 5
PR.AA-01PR.AA-01Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
PR.AA-03PR.AA-03Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
Organization-Defined Parameters(2)
Assignmentorganization-defined devices and/or types of devices
SelectionSelection (one-or-more): local / remote / network