Authenticate [Assignment: organization-defined devices and/or types of devices] before establishing [Selection (one or more): local; remote; network] connection using bidirectional authentication that is cryptographically based.
|
|
| Control Identifier | IA-3(1) |
| Latest Sync Date | 19/12/24 09:18:14 |
| Discussion | A local connection is a connection with a device that communicates without the use of a network. A network connection is a connection with a device that communicates through a network. A remote connection is a connection with a device that communicates through an external network. Bidirectional authentication provides stronger protection to validate the identity of other devices for connections that are of greater risk. |
| Related Controls | SC-8, SC-12, SC-13. |