CCI-002039

The organization requires devices to reauthenticate upon organization-defined circumstances or situations requiring reauthentication.

Implementation Guidance

The organization being inspected/assessed implements a process to require devices to reauthenticate when circumstances or situations requiring reauthentication as defined in IA-11, CCI 2037.

Validation Procedures

The organization conducting the inspection/assessment reviews the process to ensure the organization being inspected/assessed requires devices to reauthenticate when circumstances or situations requiring reauthentication as defined in IA-11, CCI 2037.

Compelling Evidence

1.) Signed and dated SOP/TTP documentation ensuring it defines and documents the circumstances or situations when devices will be required to re-authenticate as defined in IA-11, CCI 2037.

The controls below (if any) were marked by NIST as being related to CCI-002039.