IA-5 What is the solution and how is it implemented?

IA-5 (1) Control Enhancement (H)

1. 
   Enforces minimum password complexity of [Assignment: organization-defined requirements for case sensitivity, number of characters, mix of upper-case letters, lower-case letters, numbers, and special characters, including minimum requirements for each type];
   
2. 
   Enforces at least the following number of changed characters when new passwords are created: [FedRAMP Assignment: at least fifty percent (50%)];
   
3. 
   Stores and transmits only cryptographically-protected passwords;
   
4. 
   Enforces password minimum and maximum lifetime restrictions of [Assignment: organization- defined numbers for lifetime minimum, lifetime maximum];
   
5. 
   Prohibits password reuse for [FedRAMP Assignment: twenty-four (24)] generations; and
   
6. 
   Allows the use of a temporary password for system logons with an immediate change to a permanent password.
   

IA-5 (2) Control Enhancement (M) (H)

The information system, for PKI-based authentication:

1. 
   Validates certifications by constructing and verifying a certification path to an accepted trust anchor including checking certificate status information;
   
2. 
   Enforces authorized access to the corresponding private key;
   
3. 
   Maps the authenticated identity to the account of the individual or group; and
   
4. 
   Implements a local cache of revocation data to support path discovery and validation in case of inability to access revocation information via the network.
   

IA-5 (2)	Control Summary Information
Responsible Role:
Implementation Status (check all that apply): ☐ Implemented ☐ Partially implemented ☐ Planned ☐ Alternative implementation ☐ Not applicable
Control Origination (check all that apply): ☐ Service Provider Corporate ☐ Service Provider System Specific ☐ Service Provider Hybrid (Corporate and System Specific) ☐ Configured by Customer (Customer System Specific) ☐ Provided by Customer (Customer System Specific) ☐ Shared (Service Provider and Customer Responsibility) ☐ Inherited from pre-existing FedRAMP Authorization for Click here to enter text. ,

IA-5 (2) What is the solution and how is it implemented?
Part a
Part b
Part c
Part d

Download 1.2 Mb.

Share with your friends: