IA-05(06) Protection of Authenticators
NIST SP 800-53 (controls) 5.1.1+u4
All changes in this version
All changes in this version
Title
Protection of Authenticators
Control
Protect authenticators commensurate with the security category of the information to which use of the authenticator permits access.
Discussion
For systems that contain multiple security categories of information without reliable physical or logical separation between categories, authenticators used to grant access to the systems are protected commensurate with the highest security category of information on the systems. Security categories of information are determined as part of the security categorization process.
Related controls
ra-2
Assessment objective
IA-05(06) authenticators are protected commensurate with the security category of the information to which use of the authenticator permits access.
STIG rules that implement this control 1
Application Security and Development V6R5
- APSC-DV-003100 CAT II The application must use encryption to implement key exchange and authenticate endpoints prior to establishing a communication channel for key exchange.