CCI-002035

Require individuals accessing the system employ organization-defined supplemental authentication techniques or mechanisms under specific organization-defined circumstances or situations.

Implementation Guidance

The organization being inspected/assessed implements a process to require that individuals accessing the information system employ supplemental authentication techniques or mechanisms defined in IA-10, CCI 2034 under specific circumstances or situations defined in IA-10, CCI 2033.

Validation Procedures

The organization conducting the inspection/assessment reviews the process to ensure the organization being inspected/assessed requires that individuals accessing the information system employ supplemental authentication techniques or mechanisms defined in IA-10, CCI 2034 under specific circumstances or situations defined in IA-10, CCI 2033.

Compelling Evidence

1.) Signed and dated SOP/TTP implementing the process to require that individuals accessing the information system employ supplemental authentication techniques or mechanisms defined in IA-10, CCI 2043 under specific circumstances or situations defined in IA-10, CCI 2033.

The controls below (if any) were marked by NIST as being related to CCI-002035.