Part b IA-2 (9) Identification and Authentication (Organizational Users) – The information system uses [Assignment: organization-defined replay-resistant authentication for network access to non-privileged accounts. mechanisms] DoD parameter: [Replay-resistant authentication mechanisms (e.g. Time Stamp Cryptographic mechanisms, Protected incremented Counters, Nonces, Cnonce)] IA-2 (9) Control Summary Information Responsible Role: Parameter: Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation - equivalence (explain below) Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information <Date System Name>, of PA> IA-2 (9) What is the solution and how is it implemented? Identification and Authentication (IA) changed controls – IA-3 Device Identification and Authentication – The information system uniquely identifies and authenticates [Assignment: organization-defined
Part b IA-2 (9) – Identification and Authentication (Organizational Users) The information system uses [Assignment: organization-defined replay-resistant authentication mechanisms] for network access to non-privileged accounts. DoD parameter: [Replay-resistant authentication mechanisms (e.g. Time Stamp Cryptographic mechanisms, Protected incremented Counters, Nonces, Cnonce)] IA-2 (9) Control Summary Information Responsible Role: Parameter: Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation - equivalence (explain below) Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information System Name>, <Date of PA> IA-2 (9) What is the solution and how is it implemented? Identification and Authentication (IA) – changed controls IA-3 – Device Identification and Authentication The information system uniquely identifies and authenticates [Assignment: organization-defined
U_CSM_level_4_iaas_template.docx