IA-4(9)

Requirement

Maintain the attributes for each uniquely identified individual, device, or service in [Assignment: organization-defined protected central storage].

Discussion

For each of the entities covered in IA-2, IA-3, IA-8, and IA-9, it is important to maintain the attributes for each authenticated entity on an ongoing basis in a central (protected) store.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Identification and authentication policy; system security plan; procedures addressing identifier management; procedures addressing account management; system design documentation; system configuration settings and associated documentation; system audit records; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with identifier management responsibilities; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Mechanisms supporting and/or implementing identifier management].

ID	Assessment Objectives
IA-04(09)	the attributes for each uniquely identified individual, device, or service are maintained in <IA-04(09)_ODP protected central storage>.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!