Identification and Authentication (IA) Identification and Authentication (IA) additional controls – IA-2(4) Identification and Authentication (Organizational Users): – The information system uses multifactor authentication for local access to non-privileged accounts. IA-2(4) Control Summary Information Responsible Role: Implementation Status all that apply): Implemented Partially implemented Planned Alternative implementation equivalence (explain – Configured by customer Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information <Date System Name>, of PA> IA-2(4) What is the solution and how is it implemented? IA-2 (5) Identification and Authentication (Organizational – The organization: (a) Allows the use of group authenticators only when used in conjunction with an individual/unique authenticator; and (b) Requires individuals to be authenticated with an individual authenticator prior to using a group authenticator. IA-2 (5) Control Summary Information Responsible Role:
Identification and Authentication (IA) Identification and Authentication (IA) – additional controls IA-2(4) – Identification and Authentication (Organizational Users): The information system uses multifactor authentication for local access to non-privileged accounts. IA-2(4) Control Summary Information Responsible Role: Implementation Status all that apply): Implemented Partially implemented Planned Alternative implementation – equivalence (explain Configured by customer Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information System Name>, <Date of PA> IA-2(4) What is the solution and how is it implemented? IA-2 (5) – Identification and Authentication (Organizational The organization: (a) Allows the use of group authenticators only when used in conjunction with an individual/unique authenticator; and (b) Requires individuals to be authenticated with an individual authenticator prior to using a group authenticator. IA-2 (5) Control Summary Information Responsible Role: