IA-4 Identifier Management (H)
The organization manages information system identifiers for users and devices by:
Receiving authorization from [FedRAMP Assignment at a minimum, the ISSO (or similar role within the organization)] to assign an individual, group, role, or device identifier;
Selecting an identifier that identifies an individual, group, role, or device;
Assigning the identifier to the intended individual, group, role, or device;
Preventing reuse of identifiers for [FedRAMP Assignment: at least two (2) years]; and
Disabling the identifier after [FedRAMP Assignment: thirty-five (35) days (see additional requirements and guidance)]
Share with your friends: |