Detections
Analytics
800-53|IA-8(2)
Title
ACCEPTANCE OF THIRD-PARTY CREDENTIALSDescription
The information system accepts only FICAM-approved third-party credentials.Supplemental
This control enhancement typically applies to organizational information systems that are accessible to the general public, for example, public-facing websites. Third-party credentials are those credentials issued by nonfederal government entities approved by the Federal Identity, Credential, and Access Management (FICAM) Trust Framework Solutions initiative. Approved third-party credentials meet or exceed the set of minimum federal government-wide technical, security, privacy, and organizational maturity requirements. This allows federal government relying parties to trust such credentials at their approved assurance levels.Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Related: AU-2
Category: IDENTIFICATION AND AUTHENTICATION
Parent Title: IDENTIFICATION AND AUTHENTICATION (NON-ORGANIZATIONAL USERS)
Family: IDENTIFICATION AND AUTHENTICATION
Baseline Impact: LOW,MODERATE,HIGH
Audit Items
View all Reference Audit Items