IA-5(9)

Requirement

Use the following external organizations to federate credentials: [Assignment: organization-defined external organizations].

Discussion

Federation provides organizations with the capability to authenticate individuals and devices when conducting cross-organization activities involving the processing, storage, or transmission of information. Using a specific list of approved external organizations for authentication helps to ensure that those organizations are vetted and trusted.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Identification and authentication policy; procedures addressing authenticator management; procedures addressing account management; system security plan; security agreements; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with authenticator management responsibilities; organizational personnel with information security responsibilities; system/network administrators].

Test

[SELECT FROM: Mechanisms supporting and/or implementing safeguards for authenticator management].

CMMC Training

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!