graphgrc

SCF - IAC-04 - Identification & Authentication for Devices

Mechanisms exist to uniquely identify and centrally Authenticate, Authorize and Audit (AAA) devices before establishing a connection using bidirectional authentication that is cryptographically- based and replay resistant.

Mapped framework controls

ISO 27002

NIST 800-53

SOC 2

Control questions

Does the organization uniquely identify and centrally Authenticate, Authorize and Audit (AAA) devices before establishing a connection using bidirectional authentication that is cryptographically- based and replay resistant?