IA-07 Cryptographic Module Authentication
Identification and Authentication
Low Moderate High
Description
Implement mechanisms for authentication to a cryptographic module that meet the requirements of applicable laws, executive orders, directives, policies, regulations, standards, and guidelines for such authentication.
Supplemental Guidance
Authentication mechanisms may be required within a cryptographic module to authenticate an operator accessing the module and to verify that the operator is authorized to assume the requested role and perform services within that role.
Patterns that use this control (6)
Grouped by the emphasis each pattern gives it.
Standard (2)
MITRE ATT&CK Techniques (12)
ATT&CK v20.0Techniques this control mitigates in the CTID mapping of SP 800-53, made for ATT&CK 16.1 and carried to v20.0. See them all in the ATT&CK matrix.
Initial Access 1 Persistence 5 Stealth 5 Defense Impairment 5 Impact 1
Initial Access
Persistence
Stealth
Defense Impairment
Impact
Compliance Mappings
ISO 27002:2022
5.17
COBIT 2019
DSS05
NIST CSF 2.0
PR.AA-01PR.AA-03
MAS TRM
9
BSI IT-Grundschutz
ORP.4
ANSSI
Hygiene.12RGS.2.3SecNumCloud.11.1
FINMA Circular 2023/1
IV.B.d(59)IV.C(63)
OSFI B-13
B-13.3.2
EU GDPR
Art.32(1)(a)Rec.83
EU DORA
Art.9(3)
BIO2
5.17
RBI CSF
ITGRCA.16
FISC Security Guidelines
FISC.T4
HKMA TM-E-1
TME1.8.3TME1.9.1
DNB Good Practice
DNB.18.3
SAMA CSF
3.13.4
UAE IA
T9
CBB TM
TM-6
Qatar NIA
AC
CBE CSF
CTO-3
BoM CTRM
3.3
FFIEC IS
II.C.15II.C.19
HIPAA Security Rule
§164.312(d)
BOT Cyber Resilience
Ch2.2
CMMC 2.0
IA
PCI PTS v6
C
FIPS 140-3
FIPS 140-3 §7.4
Common Criteria
CC Part 2 — FCSCC Part 2 — FIA
Solvency II
EIOPA-ICT-4.7
HITRUST CSF v11
10.c
FDA 21 CFR Part 11
§11.200(a)(1)
FDA Cybersecurity Guidance
SA-1
OWASP MASVS v2.1
MASVS-AUTH-2
Basel SCO60
SCO60.61SCO60.66
ISO 17799 (legacy)
None.
COBIT 4.1 (legacy)
None.