KSI-IAM-APM Adopting Passwordless Methods
FedRAMP Consolidated Rules (2026) 2026.10.08.01 against 2026.10.05.01
All changes in this version
All changes in this version
Title
Adopting Passwordless Methods
Control
Secure passwordless methods are used for user authentication and authorization when feasible, otherwise strong passwords with phishing-resistant MFA is used.
Related controls
ac-2, ac-3, ia-2, ia-2.1, ia-2.2, ia-2.8, ia-5, ia-5.1, ia-5.2, ia-5.6, ia-6, ia-8, sc-23