IA-2(1)

IA-2(1): Network Access to Privileged Accounts

The information system implements multifactor authentication for network access to privileged accounts.

Overlays
Classified, Cross Domain (Access), Cross Domain (Multilevel), Cross Domain (Transfer), Int-A, Int-B, Int-C

CSF Categories
None

The controls below (if any) were marked by NIST as being related to IA-2(1).

Control	Description
AC-6	The organization employs the principle of least privilege, allowing only authorized accesses for users (or processes acting on behalf of users) which are necessary to accomplish assigned tasks in accordance with organizational missions and business functions.

The controls below (if any) add on to the requirements of IA-2(1).

Control	Description
No controls

The CCIs below are tied to IA-2(1).

CCI	Definition
CCI-000765	Implement multifactor authentication for access to privileged accounts.