IA-3(1): Cryptographic Bidirectional Authentication
Control Family:
Parent Control:
Threats Addressed:
Baselines:
(Not part of any baseline)
Previous Version:
- NIST Special Publication 800-53 Revision 4:
- IA-3(1): Cryptographic Bidirectional Authentication
Control Statement
Authenticate [Assignment: organization-defined devices and/or types of devices] before establishing [Assignment (one or more): local, remote, network] connection using bidirectional authentication that is cryptographically based.
Supplemental Guidance
A local connection is a connection with a device that communicates without the use of a network. A network connection is a connection with a device that communicates through a network. A remote connection is a connection with a device that communicates through an external network. Bidirectional authentication provides stronger protection to validate the identity of other devices for connections that are of greater risk.