IAC-14
Re-Authentication
Description
Mechanisms exist to force users and devices to re-authenticate according to organization-defined circumstances that necessitate re-authentication.
Control Question
Does the organization force users and devices to re-authenticate according to organization-defined circumstances that necessitate re-authentication?
Control Metadata
Domain:
Identification & Authentication
Validation Cadence:
Annual