BaselineWatch
Desk

KSI-IAM-APM Adopting Passwordless Methods

FedRAMP Consolidated Rules (2026) 2026.09.13.02 against 2026.07.14.01
All changes in this version
unchanged KSI-IAM: Identity and Access Management

Title

Adopting Passwordless Methods

Control

Secure passwordless methods are used for user authentication and authorization when feasible, otherwise strong passwords with phishing-resistant MFA is used.

Related controls

ac-2, ac-3, ia-2, ia-2.1, ia-2.2, ia-2.8, ia-5, ia-5.1, ia-5.2, ia-5.6, ia-6, ia-8, sc-23