IA-4(4): Identify User Status

Control Family:

Identification and Authentication

Parent Control:

IA-4: Identifier Management

CSF v1.1 References:

PR.AC-1
PR.AC-6

Threats Addressed:

Spoofing
Repudiation

Baselines:

Moderate
High

Previous Version:

NIST Special Publication 800-53 Revision 4:
IA-4(4): Identify User Status

Control Statement

Manage individual identifiers by uniquely identifying each individual as [Assignment: organization-defined characteristic identifying individual status].

Supplemental Guidance

Characteristics that identify the status of individuals include contractors, foreign nationals, and non-organizational users. Identifying the status of individuals by these characteristics provides additional information about the people with whom organizational personnel are communicating. For example, it might be useful for a government employee to know that one of the individuals on an email message is a contractor.