IA-4(5)

Requirement

Manage individual identifiers dynamically in accordance with [Assignment: organization-defined dynamic identifier policy].

Discussion

In contrast to conventional approaches to identification that presume static accounts for preregistered users, many distributed systems establish identifiers at runtime for entities that were previously unknown. When identifiers are established at runtime for previously unknown entities, organizations can anticipate and provision for the dynamic establishment of identifiers. Pre-established trust relationships and mechanisms with appropriate authorities to validate credentials and related identifiers are essntial.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Identification and authentication policy; system security plan; procedures addressing identifier management; procedures addressing account management; system design documentation; system configuration settings and associated documentation; system audit records; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with identifier management responsibilities; organizational personnel with information security responsibilities; system/network administrators; system developers].

Test

[SELECT FROM: Mechanisms supporting and/or implementing dynamic identifier management].

ID	Assessment Objectives
IA-04(05)	individual identifiers are dynamically managed in accordance with <IA-04(05)_ODP dynamic identifier policy>.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!