IAC-10
Authenticator Management
Description
Mechanisms exist to: (1) Securely manage authenticators for users and devices; and (2) Ensure the strength of authentication is appropriate to the classification of the data being accessed.
Control Question
Does the organization: (1) Securely manage authenticators for users and devices; and (2) Ensure the strength of authentication is appropriate to the classification of the data being accessed?
Control Metadata
Domain:
Identification & Authentication
Validation Cadence:
Annual