IA-11

IA-11 RE-AUTHENTICATION

Overview

Number	Title	Impact	Priority	Subject Area
IA-11	Re-Authentication		P0	Identification And Authentication

Instructions
The organization requires users and devices to re-authenticate when Assignment: organization-defined circumstances or situations requiring re-authentication.

Guidance
In addition to the re-authentication requirements associated with session locks, organizations may require re-authentication of individuals and/or devices in other situations including, for example: (i) when authenticators change; (ii), when roles change; (iii) when security categories of information systems change; (iv), when the execution of privileged functions occurs; (v) after a fixed period of time; or (vi) periodically.

Guidance

In addition to the re-authentication requirements associated with session locks, organizations may require re-authentication of individuals and/or devices in other situations including, for example: (i) when authenticators change; (ii), when roles change; (iii) when security categories of information systems change; (iv), when the execution of privileged functions occurs; (v) after a fixed period of time; or (vi) periodically.

Enhancements