IA-2(3)

IA-2(3): Local Access to Privileged Accounts

The information system implements multifactor authentication for local access to privileged accounts.

Overlays
None

CSF Categories
None

The controls below (if any) were marked by NIST as being related to IA-2(3).

Control	Description
AC-6	The organization employs the principle of least privilege, allowing only authorized accesses for users (or processes acting on behalf of users) which are necessary to accomplish assigned tasks in accordance with organizational missions and business functions.

The controls below (if any) add on to the requirements of IA-2(3).

Control	Description
No controls

The CCIs below are tied to IA-2(3).

CCI	Definition
CCI-000767	The information system implements multifactor authentication for local access to privileged accounts.