Navigate

CCI-004094

CCI-004094 Definition

Resolve user identities to a unique individual.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Determine if user identities are resolved to a unique individual.

Validation Procedures

Examine: [SELECT FROM: Identification and authentication policy; procedures addressing identity proofing; system security plan; privacy plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with system operations responsibilities; organizational personnel with information security and privacy responsibilities; legal counsel; system/network administrators; system developers; organizational personnel with identification and authentication responsibilities]. Test: [SELECT FROM: Mechanisms supporting and/or implementing identification and authentication capabilities].

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-004094.

Control	Description
IA-12	a: Identity proof users that require accounts for logical access to systems based on appropriate identity assurance level requirements as specified in applicable standards and guidelines; b: Resolve user identities to a unique individual; and c: Collect, validate, and verify identity evidence.