|
controlIA-8
Identification and Authentication (Non-organizational Users) (IA-8)
Uniquely identify and authenticate non-organizational users or processes acting on behalf of non-organizational users.
Security Baselines
LOWMODERATEHIGH
identificationauthenticationidentity
Why These Connect
Maps To6
These are equivalent or closely aligned requirements in other frameworks.
Baselined In3
This control is included in the linked security baseline (LOW, MODERATE, or HIGH).
Supports31
These related controls work together — a change to one may affect the others.
Mitigates1
This control helps defend against or reduce the risk of the linked threat technique.
Enhances6
These enhancements add specific capabilities or refinements to the base control.
Related Controls(20)
AC-2Account Management (AC-2)
LMH
AC-17Remote Access (AC-17)LMH
AC-18Wireless Access (AC-18)LMH
AU-6Audit Record Review, Analysis, and Reporting (AU-6)LMH
IA-2Identification and Authentication (Organizational Users) (IA-2)LMH
IA-4Identifier Management (IA-4)LMH
IA-5Authenticator Management (IA-5)LMH
AC-6Least Privilege (AC-6)MH
AC-14Permitted Actions Without Identification or Authentication (AC-14)LMH
IA-10Adaptive Authentication (IA-10)IA-11Re-authentication (IA-11)LMH
IA-13Identity Providers and Authorization Servers (IA-13)MA-4Nonlocal Maintenance (MA-4)LMH
RA-3Risk Assessment (RA-3)LMH
SA-4Acquisition Process (SA-4)LMH
SC-8Transmission Confidentiality and Integrity (SC-8)MH
IA-12Identity Proofing (IA-12)MH
MA-5Maintenance Personnel (MA-5)LMH
PE-3Physical Access Control (PE-3)LMH
SC-45System Time Synchronization (SC-45)Threat Coverage(1 ATT&CK techniques)
Cross-Framework Mappings(6)
PR.AA-01PR.AA-01Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
PR.AA-03PR.AA-03Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
ISO 27001ISO/IEC 27001:20221 mappingFinal
NIST OLIR informative reference — SP 800-53 Rev 5 to ISO/IEC 27001:2022
HIPAAHIPAA Security Rule2 mappingsFinal
NIST OLIR informative reference — HIPAA Security Rule to SP 800-53 Rev 5
PR.AA-01PR.AA-01Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
PR.AA-03PR.AA-03Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5