IA-5(13)

Requirement

Prohibit the use of cached authenticators after [Assignment: organization-defined time period].

Discussion

Cached authenticators are used to authenticate to the local machine when the network is not available. If cached authentication information is out of date, the validity of the authentication information may be questionable.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Identification and authentication policy; procedures addressing authenticator management; system security plan; system design documentation; system configuration settings and associated documentation; system audit records; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with authenticator management responsibilities; organizational personnel with information security responsibilities; system/network administrators; system developers].

Test

[SELECT FROM: Mechanisms supporting and/or implementing authenticator management capability].

ID	Assessment Objectives
IA-05(13)	the use of cached authenticators is prohibited after <IA-05(13)_ODP time period>.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!