The operating system must require individuals to be authenticated with an individual authenticator prior to using a group authenticator.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-33084	SRG-OS-000109-NA	SV-43482r1_rule		Medium

Description
To assure individual accountability and prevent unauthorized access, organizational users shall be individually identified and authenticated. Rationale for non-applicability: For the purposes of this SRG, a mobile operating system is assumed to support a single human-accessible user account. In this context, the user would not have to use a group authenticator. This lone device user would not have pertinent organizational context on the device itself.

Description

To assure individual accountability and prevent unauthorized access, organizational users shall be individually identified and authenticated. Rationale for non-applicability: For the purposes of this SRG, a mobile operating system is assumed to support a single human-accessible user account. In this context, the user would not have to use a group authenticator. This lone device user would not have pertinent organizational context on the device itself.

STIG	Date
Mobile Operating System Security Requirements Guide	2013-07-03

Details

Check Text ( C-41343r1_chk )
This requirement is NA for the Mobile OS SRG.

Fix Text (F-36984r1_fix)
The requirement is NA. No fix is required.