Identification and Authentication (IA)
15 controls
- IA-1 Identification and Authentication Policy and Procedures
- IA-2 Identification and Authentication (Organizational Users)
- IA-2(1) Multifactor Authentication to Privileged Accounts
- IA-2(2) Multifactor Authentication to Non-Privileged Accounts
- IA-4 Identifier Management
- IA-5 Authenticator Management
- IA-5(1) Authenticator Management | Password-based Authentication
- IA-5(9) Federated Credential Management
- IA-6 Authenticator Feedback
- IA-7 Cryptographic Module Authentication
- IA-8 Identification and Authentication (Non-Organizational Users)
- IA-11 Re-Authentication
- IA-12 Identity Proofing
- IA-12(2) Identity Evidence
- IA-12(3) Identity Evidence Validation and Verification
Revision History
Last Updated: February 21, 2025
Previous Versions:
- June 29, 2023
- May 31, 2022
- March 25, 2021
- September 16, 2019