IA.L1-3.5.1 Identification

This document provides self-assessment guidance for conducting Cybersecurity Maturity Model Certification (CMMC) assessments for Level 1.

This example procedure from the EPA describes how the agency is to implement security control requirements for the NIST SP 800-53 Identification and Authentication (IA) control family.

This article provides a comprehensive description of Data Loss Prevention (DLP). The article includes best Practices for DLP planning and preparation, and tools for automating DLP.

This document describes security identifiers and how they work in regards to accounts and groups in the Windows operating system.

This example policy describes the configuration of resources to uniquely identify and authenticate users not affiliated with the university who are permitted to utilize university information resources.

This example policy describes the capability for information resources to uniquely identify and authenticate university faculty, staff, students, and other approved users.

This example policy describes how user or device identifiers are managed by receiving appropriate authorization to initially assign a user, selecting a unique identifier, preventing the reuse of identifiers, and disabling the user identifier after a period of inactivity or change in job status.

This YouTube video discusses identification and authentication issues in the context of computer security.

In this edition of the On Call Compliance Solutions Compliance Tip of the Week, we focus on individual authenticators including passwords, key cards, cryptographic devices, and one-time password devices. Let’s talk about NIST 800-171 Control 3.5.1 Identify system users, processes acting on behalf of users, and devices.