IA-5(8)—Authenticator Management

PBMM (P2)

Secret (P2)

Technical

>Control Description

AUTHENTICATOR MANAGEMENT | MULTIPLE INFORMATION SYSTEM ACCOUNTS The organization implements ⚙organization-defined security safeguards to manage the risk of compromise due to individuals having accounts on multiple information systems.

>Supplemental Guidance

When individuals have accounts on multiple information systems, there is the risk that the compromise of one account may lead to the compromise of other accounts if individuals use the same authenticators. Possible alternatives include, for example: (i) having different authenticators on all systems; (ii) employing some form of single sign-on mechanism; or (iii) including some form of one-time passwords on all systems.

Ask AI

Configure your API key to use AI features.