IA-1 Policy and procedures
Identification and authentication policy and procedures: documenting, distributing, owning and periodically reviewing the policy and procedures behind authentication, identifiers and authenticators.
IA Identification and authentication
Identification and authentication (IA) family of NIST SP 800-53 Rev. 5: authenticating organizational users, devices, services and outside users, identifier and authenticator management, identity proofing and identity providers.
IA-2 Identification and authentication (organizational users)
Uniquely identifying and authenticating organizational users, including the multi-factor authentication enhancements for privileged and non-privileged accounts that SP 800-53B selects even at the low baseline, replay resistance and PIV acceptance.
IA-3 Device identification and authentication
Uniquely identifying and authenticating defined devices before local, remote or network connections, plus enhancements for cryptographic bidirectional authentication, dynamic address allocation and device attestation.
IA-4 Identifier management
Managing identifiers for individuals, groups, roles, services and devices: authorization to assign, selection, assignment to the intended entity and preventing reuse for a defined period, plus the identify-user-status enhancement.
IA-5 Authenticator management
Managing authenticators such as passwords, tokens, certificates and biometrics through their life cycle: identity checks at issuance, strength, default changes, refresh, protection and group account changes, plus password and PKI enhancements.
IA-6 Authentication feedback
Obscuring authentication feedback, such as masking password characters, so that displayed information cannot be used by unauthorized individuals to compromise authentication.
IA-7 Cryptographic module authentication
Authenticating to cryptographic modules with mechanisms that meet applicable laws, directives, policies, regulations, standards and guidelines, verifying operators before they assume roles in the module.
IA-8 Identification and authentication (non-organizational users)
Uniquely identifying and authenticating non-organizational users such as members of the public and partners, plus enhancements for accepting other agencies' PIV credentials, external authenticators and defined identity profiles.
IA-9 Service identification and authentication
Uniquely identifying and authenticating defined system services and applications before they communicate with devices, users or other services, for example with digital certificates; not in any SP 800-53B baseline.
IA-10 Adaptive authentication
Adaptive authentication: requiring supplemental authentication techniques or mechanisms in defined circumstances, such as unusual access patterns, to counter compromised credentials; not in any SP 800-53B baseline.
IA-11 Re-authentication
Requiring users to re-authenticate in defined circumstances, such as role or credential changes or privileged function execution, beyond the re-authentication required after a device lock.
IA-12 Identity proofing
Identity proofing users who need accounts to the appropriate identity assurance level, resolving identities to a unique individual and collecting, validating and verifying identity evidence, plus evidence and address confirmation enhancements.
IA-13 Identity providers and authorization servers
Using identity providers and authorization servers to manage user, device and non-person entity identities, attributes and access rights, the newest IA control (Release 5.1.1), with enhancements on key protection, assertion and token verification and token management.
