Identification and Authentication (IA)
The Identification and Authentication family has 13 active controls in SP 800-53 release 5.2.0. “Yes” marks membership in the SP 800-53B baselines.
| Control | Title | Low | Moderate | High | Privacy |
|---|---|---|---|---|---|
| IA-1 | Policy and Procedures | Yes | Yes | Yes | |
| IA-2 | Identification and Authentication (Organizational Users) | Yes | Yes | Yes | |
| IA-3 | Device Identification and Authentication | Yes | Yes | ||
| IA-4 | Identifier Management | Yes | Yes | Yes | |
| IA-5 | Authenticator Management | Yes | Yes | Yes | |
| IA-6 | Authentication Feedback | Yes | Yes | Yes | |
| IA-7 | Cryptographic Module Authentication | Yes | Yes | Yes | |
| IA-8 | Identification and Authentication (Non-organizational Users) | Yes | Yes | Yes | |
| IA-9 | Service Identification and Authentication | ||||
| IA-10 | Adaptive Authentication | ||||
| IA-11 | Re-authentication | Yes | Yes | Yes | |
| IA-12 | Identity Proofing | Yes | Yes | ||
| IA-13 | Identity Providers and Authorization Servers |
Independent guidance, not an official NIST publication. Control text is from NIST SP 800-53 Rev. 5 and SP 800-53A (public domain). Original content is licensed CC BY 4.0; program templates and the downloadable kit are dedicated to the public domain under CC0 1.0.