IA-4(1)—Identifier Management

PBMM (P2)

Secret (P2)

Technical

>Control Description

IDENTIFIER MANAGEMENT | PROHIBIT ACCOUNT IDENTIFIERS AS PUBLIC IDENTIFIERS The organization prohibits the use of information system account identifiers that are the same as public identifiers for individual electronic mail accounts.

>Supplemental Guidance

Prohibiting the use of information systems account identifiers that are the same as some public identifier such as the individual identifier section of an electronic mail address, makes it more difficult for adversaries to guess user identifiers on organizational information systems. Related control: AT-2.

Ask AI

Configure your API key to use AI features.