iac-02-identification&authenticationfororganizationalusers.md

SCF - IAC-02 - Identification & Authentication for Organizational Users

Mechanisms exist to uniquely identify and centrally Authenticate, Authorize and Audit (AAA) organizational users and processes acting on behalf of organizational users.

Mapped framework controls

ISO 27002

• A.5.15

NIST 800-53

• IA-2

SOC 2

• CC6.1

Control questions

Does the organization uniquely identify and centrally Authenticate, Authorize and Audit (AAA) organizational users and processes acting on behalf of organizational users?