Catalog

Controls & assessment objectives

Every control is stored with its full statement and each published assessment objective, quoted verbatim from the source document. Examples and verdicts hang off the objectives, not off a vague summary.

11 controls

IA.L2-3.5.1IA · Identification and AuthenticationLevel 2CMMC L2
Identification [CUI Data]
Identify system users, processes acting on behalf of users, and devices.
- 3objectives
- 1examples
- 1threads
IA.L2-3.5.2IA · Identification and AuthenticationLevel 2CMMC L2
Authentication [CUI Data]
Authenticate (or verify) the identities of users, processes, or devices, as a prerequisite to allowing access to organizational systems.
- 3objectives
- 1examples
- 0threads
IA.L2-3.5.3IA · Identification and AuthenticationLevel 2CMMC L2
Multifactor Authentication
Use multifactor authentication for local and network access to privileged accounts and for network access to non-privileged accounts.
- 4objectives
- 1examples
- 0threads
IA.L2-3.5.4IA · Identification and AuthenticationLevel 2CMMC L2
Replay-resistant Authentication
Employ replay-resistant authentication mechanisms for network access to privileged and non-privileged accounts.
- 1objectives
- 1examples
- 0threads
IA.L2-3.5.5IA · Identification and AuthenticationLevel 2CMMC L2
Identifier Reuse
Prevent reuse of identifiers for a defined period.
- 2objectives
- 1examples
- 0threads
IA.L2-3.5.6IA · Identification and AuthenticationLevel 2CMMC L2
Identifier Handling
Disable identifiers after a defined period of inactivity.
- 2objectives
- 1examples
- 0threads
IA.L2-3.5.7IA · Identification and AuthenticationLevel 2CMMC L2
Password Complexity
Enforce a minimum password complexity and change of characters when new passwords are created.
- 4objectives
- 1examples
- 0threads
IA.L2-3.5.8IA · Identification and AuthenticationLevel 2CMMC L2
Password Reuse
Prohibit password reuse for a specified number of generations.
- 2objectives
- 1examples
- 0threads
IA.L2-3.5.9IA · Identification and AuthenticationLevel 2CMMC L2
Temporary Passwords
Allow temporary password use for system logons with an immediate change to a permanent password.
- 1objectives
- 1examples
- 0threads
IA.L2-3.5.10IA · Identification and AuthenticationLevel 2CMMC L2
Cryptographically-protected Passwords
Store and transmit only cryptographically-protected passwords.
- 2objectives
- 1examples
- 0threads
IA.L2-3.5.11IA · Identification and AuthenticationLevel 2CMMC L2
Obscure Feedback
Obscure feedback of authentication information.
- 1objectives
- 1examples
- 0threads