CCI-002038

The organization requires users to reauthenticate upon organization-defined circumstances or situations requiring reauthentication.

Implementation Guidance

The organization being inspected/assessed implements a process to require users to reauthenticate when circumstances or situations requiring reauthentication as defined in IA-11, CCI 2036.

Validation Procedures

The organization conducting the inspection/assessment reviews the process to ensure the organization being inspected/assessed requires users to reauthenticate when circumstances or situations requiring reauthentication as defined in IA-11, CCI 2036.

Compelling Evidence

1.) Signed and dated SOP/TTP documentation ensuring it defines and documents the circumstances or situations when requires users to re-authenticate when circumstances or situations requiring re-authentication as defined in IA-11, CCI 2036.

The controls below (if any) were marked by NIST as being related to CCI-002038.