IA-2(3)—Identification And Authentication (Organizational Users)
Technical
>Control Description
IDENTIFICATION AND AUTHENTICATION | LOCAL ACCESS TO PRIVILEGED ACCOUNTS The information system implements multifactor authentication for local access to privileged accounts.
>Supplemental Guidance
Related control: AC-6.
>Tailoring Guidance
This security control/enhancement is considered a compensating control that should be applied if the capability cannot be addressed using an alternate security control/enhancement. All management should be done in a controlled zone. This security control/enhancement could be used to strengthen the audit capability if a TRA has identified an insider threat.
Ask AI
Configure your API key to use AI features.