|
controlIA-4
Identifier Management (IA-4)
Manage system identifiers by:
Security Baselines
LOWMODERATEHIGH
identificationauthenticationidentity
Why These Connect
Maps To4
These are equivalent or closely aligned requirements in other frameworks.
Baselined In3
This control is included in the linked security baseline (LOW, MODERATE, or HIGH).
Supports26
These related controls work together — a change to one may affect the others.
Mitigates1
This control helps defend against or reduce the risk of the linked threat technique.
Enhances9
These enhancements add specific capabilities or refinements to the base control.
Related Controls(20)
AC-2Account Management (AC-2)
LMH
AC-5Separation of Duties (AC-5)MH
AT-2Literacy Training and Awareness (AT-2)LMH
IA-2Identification and Authentication (Organizational Users) (IA-2)LMH
IA-3Device Identification and Authentication (IA-3)MH
IA-5Authenticator Management (IA-5)LMH
IA-8Identification and Authentication (Non-organizational Users) (IA-8)LMH
IA-9Service Identification and Authentication (IA-9)IA-12Identity Proofing (IA-12)MH
MA-4Nonlocal Maintenance (MA-4)LMH
PE-2Physical Access Authorizations (PE-2)LMH
PE-3Physical Access Control (PE-3)LMH
PE-4Access Control for Transmission (PE-4)MH
PL-4Rules of Behavior (PL-4)LMH
PM-12Insider Threat Program (PM-12)PS-3Personnel Screening (PS-3)LMH
PS-4Personnel Termination (PS-4)LMH
PS-5Personnel Transfer (PS-5)LMH
SC-37Out-of-band Channels (SC-37)IA-11Re-authentication (IA-11)LMH
Threat Coverage(1 ATT&CK techniques)
Cross-Framework Mappings(4)
PR.AA-01PR.AA-01Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
ISO 27001ISO/IEC 27001:20221 mappingFinal
NIST OLIR informative reference — SP 800-53 Rev 5 to ISO/IEC 27001:2022
HIPAAHIPAA Security Rule2 mappingsFinal
NIST OLIR informative reference — HIPAA Security Rule to SP 800-53 Rev 5
PR.AA-01PR.AA-01Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
Organization-Defined Parameters(2)
Assignmentorganization-defined personnel or roles
Assignmentorganization-defined time period
Control Enhancements(9)
IA-4(1)Prohibit Account Identifiers as Public Identifiers (IA-4(1))IA-4(2)Supervisor Authorization (IA-4(2))WIA-4(3)Multiple Forms of Certification (IA-4(3))WIA-4(4)Identify User Status (IA-4(4))
MH
IA-4(5)Dynamic Management (IA-4(5))IA-4(6)Cross-organization Management (IA-4(6))IA-4(7)In-person Registration (IA-4(7))WIA-4(8)Pairwise Pseudonymous Identifiers (IA-4(8))IA-4(9)Attribute Maintenance and Protection (IA-4(9))