# IA-07 Cryptographic Module Authentication

NIST SP 800-53 control. Family: IA Identification and Authentication. Function: preventative. Baselines: low, moderate, high. Mapping licence: CC BY-SA 4.0.

Statement: Implement mechanisms for authentication to a cryptographic module that meet the requirements of applicable laws, executive orders, directives, policies, regulations, standards, and guidelines for such authentication.
Guidance: Authentication mechanisms may be required within a cryptographic module to authenticate an operator accessing the module and to verify that the operator is authorized to assume the requested role and perform services within that role.

## Patterns that use it (6)
- Critical (2): SP-024 iPhone Pattern; SP-050 Mobile Security Architecture (draft)
- Important (2): SP-005 SOA Internal Service Usage Pattern; SP-022 Board of Directors Room
- Standard (2): SP-001 Client Module; SP-002 Server Module

## Clauses by framework (34 frameworks)
- iso_27002_2022: 5.17
- cobit_2019: DSS05
- nist_csf_2: PR.AA-01, PR.AA-03
- mas_trm: 9
- bsi_grundschutz: ORP.4
- anssi: Hygiene.12, RGS.2.3, SecNumCloud.11.1
- osfi_b13: B-13.3.2
- finma_circular: IV.B.d(59), IV.C(63)
- gdpr: Art.32(1)(a), Rec.83
- dora: Art.9(3)
- bio2: 5.17
- rbi_csf: ITGRCA.16
- fisc: FISC.T4
- hkma_tme1: TME1.8.3, TME1.9.1
- dnb_good_practice: DNB.18.3
- cbb_tm: TM-6
- qatar_nia: AC
- sama_csf: 3.1, 3.4
- uae_ia: T9
- bom_ctrm: 3.3
- cbe_csf: CTO-3
- bot_cyber: Ch2.2
- ffiec_is: II.C.15, II.C.19
- hipaa_sr: §164.312(d)
- cmmc_2: IA
- pci_pts: C
- fips_140: FIPS 140-3 §7.4
- common_criteria: CC Part 2 — FCS, CC Part 2 — FIA
- fda_21_cfr_11: §11.200(a)(1)
- fda_cyber: SA-1
- hitrust_csf: 10.c
- solvency_ii: EIOPA-ICT-4.7
- owasp_masvs_v2: MASVS-AUTH-2
- basel_sco60: SCO60.61, SCO60.66
OSA's mapping for nist_csf_2 takes NIST's published crosswalk as its base. A clause not marked as OSA's own is in that crosswalk.

## More
- This control as JSON, with guidance and ATT&CK techniques: /api/v1/controls/IA-07
- Clauses only: /api/v1/controls/IA-07?fields=mappings
- Page for people: /controls/ia-07/
- Found an error? Open an issue at https://github.com/opensecurityarchitecture/osa-data/issues with the id, what OSA says and what the source says.