graphgrc

SCF - IAC-01.2 - Authenticate, Authorize and Audit (AAA)

Mechanisms exist to strictly govern the use of Authenticate, Authorize and Audit (AAA) solutions, both on-premises and those hosted by an External Service Provider (ESP).

Mapped framework controls

NIST 800-53

Control questions

Does the organization strictly govern the use of Authenticate, Authorize and Audit (AAA) solutions, both on-premises and those hosted by an External Service Provider (ESP)?