Detections
Analytics
800-53|IA-3(1)
Title
CRYPTOGRAPHIC BIDIRECTIONAL AUTHENTICATIONDescription
The information system authenticates [Assignment: organization-defined specific devices and/or types of devices] before establishing [Selection (one or more): local; remote; network] connection using bidirectional authentication that is cryptographically based.Supplemental
A local connection is any connection with a device communicating without the use of a network. A network connection is any connection with a device that communicates through a network (e.g., local area or wide area network, Internet). A remote connection is any connection with a device communicating through an external network (e.g., the Internet). Bidirectional authentication provides stronger safeguards to validate the identity of other devices for connections that are of greater risk (e.g., remote connections).Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Related: SC-12,SC-13,SC-8
Category: IDENTIFICATION AND AUTHENTICATION
Parent Title: DEVICE IDENTIFICATION AND AUTHENTICATION
Family: IDENTIFICATION AND AUTHENTICATION
Audit Items
View all Reference Audit Items