IA-3 (1)
IA-3 (1): Cryptographic Bidirectional Authentication
The information system authenticates [Assignment: organization-defined specific devices and/or types of devices] before establishing [Selection (one or more): local; remote; network] connection using bidirectional authentication that is cryptographically based.
Supplemental
A local connection is any connection with a device communicating without the use of a network. A network connection is any connection with a device that communicates through a network (e.g., local area or wide area network, Internet). A remote connection is any connection with a device communicating through an external network (e.g., the Internet). Bidirectional authentication provides stronger safeguards to validate the identity of other devices for connections that are of greater risk (e.g., remote connections).
| CIA Levels | |
|---|---|
| Confidentiality | moderate |
| Integrity | moderate |
| Availability | unknown |
| Overlays |
|---|
| Int-C |