Navigate

IA-4(6)

IA-4(6): Cross-organization Management

Coordinate with the following external organizations for cross-organization management of identifiers: [external organizations with whom to coordinate the cross-organization management of identifiers are defined;].

Supplemental

Cross-organization identifier management provides the capability to identify individuals, groups, roles, or devices when conducting cross-organization activities involving the processing, storage, or transmission of information.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
DAF Baseline

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to IA-4(6).

Control	Description
AU-16	Employ [methods for coordinating audit information among external organizations when audit information is transmitted across organizational boundaries are defined;] for coordinating [audit information to be coordinated among external organizations when audit information is transmitted across organizational boundaries is defined;] among external organizations when audit information is transmitted across organizational boundaries.
IA-2	Uniquely identify and authenticate organizational users and associate that unique identification with processes acting on behalf of those users.
IA-5	Manage system authenticators by: a: Verifying, as part of the initial authenticator distribution, the identity of the individual, group, role, service, or device receiving the authenticator; b: Establishing initial authenticator content for any authenticators issued by the organization; c: Ensuring that authenticators have sufficient strength of mechanism for their intended use; d: Establishing and implementing administrative procedures for initial authenticator distribution, for lost or compromised or damaged authenticators, and for revoking authenticators; e: Changing default authenticators prior to first use; f: Changing or refreshing authenticators [a time period for changing or refreshing authenticators by authenticator type is defined;] or when [events that trigger the change or refreshment of authenticators are defined;] occur; g: Protecting authenticator content from unauthorized disclosure and modification; h: Requiring individuals to take, and having devices implement, specific controls to protect authenticators; and i: Changing authenticators for group or role accounts when membership to those accounts changes.

Enhancements

The controls below (if any) add on to the requirements of IA-4(6).

Control	Description
No controls

Related CCIs

The CCIs below are tied to IA-4(6).

CCI	Definition
CCI-001977	Defines the external organizations with which it will coordinate for cross-management of identifiers.
CCI-001978	Coordinate with organization-defined external organizations for cross-organization management of identifiers.