CMMC Level 2

Identification and Authentication Controls

Controls for identifying and authenticating users, processes, and devices as a prerequisite to allowing access to organizational systems.

CMMC Registered Practitioner Team 11 Controls in Family 3.5 30+ Years Experience

About the Identification and Authentication Family (IA)

Controls for identifying and authenticating users, processes, and devices as a prerequisite to allowing access to organizational systems. This family contains 11 security requirements that organizations must implement to achieve CMMC Level 2 certification and protect Controlled Unclassified Information (CUI). Petronella Technology Group's team of CMMC Registered Practitioners provides expert guidance on implementing every control in this family.

CMMC Level 2 - Identification and Authentication Controls

All 11 Identification and Authentication controls with CMMC-focused implementation guidance.

3.5.1Identify System Users and Processes→ 3.5.2Authenticate Users, Processes, and Devices→ 3.5.3Use Multifactor Authentication for Local and Network Access→ 3.5.4Employ Replay-Resistant Authentication→ 3.5.5Prevent Reuse of Identifiers→ 3.5.6Disable Identifiers After Inactivity→ 3.5.7Enforce Password Complexity and Change Requirements→ 3.5.8Prohibit Password Reuse→ 3.5.9Allow Temporary Passwords for System Logons with Immediate Change→ 3.5.10Store and Transmit Only Cryptographically-Protected Passwords→ 3.5.11Obscure Feedback of Authentication Information→

NIST SP 800-171 - Identification and Authentication Requirements

The same 11 controls with NIST 800-171-focused assessment preparation guidance.

3.5.1Identify System Users and Processes→ 3.5.2Authenticate Users, Processes, and Devices→ 3.5.3Use Multifactor Authentication for Local and Network Access→ 3.5.4Employ Replay-Resistant Authentication→ 3.5.5Prevent Reuse of Identifiers→ 3.5.6Disable Identifiers After Inactivity→ 3.5.7Enforce Password Complexity and Change Requirements→ 3.5.8Prohibit Password Reuse→ 3.5.9Allow Temporary Passwords for System Logons with Immediate Change→ 3.5.10Store and Transmit Only Cryptographically-Protected Passwords→ 3.5.11Obscure Feedback of Authentication Information→
All CMMC Families
AC: Access Control AT: Awareness and Training AU: Audit and Accountability CM: Configuration Management IA: Identification and Authentication IR: Incident Response MA: Maintenance MP: Media Protection PS: Personnel Security PE: Physical Protection RA: Risk Assessment CA: Security Assessment SC: System and Communications Protection SI: System and Information Integrity

Need Help With Identification and Authentication Controls?

Our team of CMMC Registered Practitioners helps organizations implement these controls and pass assessments.

Schedule a Compliance Assessment Calculate your SPRS score