Big Sur - Require users to reauthenticate when changing authenticators

Information

Without reauthentication, users may access resources or perform tasks for which they do not have authorization. When operating systems provide the capability to change user authenticators, it is critical the user reauthenticate.

Solution

The technology inherently meets this requirement. No fix is required.

See Also

https://github.com/usnistgov/macos_security

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-11, CCE|CCE-85368-9, CCI|CCI-002038

Plugin: Unix

Control ID: d22cf8c5bc2151ad73710358183a93eaed2515ae7092d4611c6df71e6c420a76