iac-04-identification&authenticationfordevices.md

SCF - IAC-04 - Identification & Authentication for Devices

Mechanisms exist to uniquely identify and centrally Authenticate, Authorize and Audit (AAA) devices before establishing a connection using bidirectional authentication that is cryptographically- based and replay resistant.

Mapped framework controls

ISO 27002

• A.5.16

NIST 800-53

• IA-3

SOC 2

• CC6.1

Control questions

Does the organization uniquely identify and centrally Authenticate, Authorize and Audit (AAA) devices before establishing a connection using bidirectional authentication that is cryptographically- based and replay resistant?