IA-8(4): Use of Defined Profiles
Control Family:
Baselines:
- Low
- Moderate
- High
- OT Low (SP 800-82r3)
- OT Moderate (SP 800-82r3)
- OT High (SP 800-82r3)
Previous Version:
- NIST Special Publication 800-53 Revision 4:
- IA-8(4): Use Of Ficam-Issued Profiles
Control Statement
Conform to the following profiles for identity management [Assignment: organization-defined identity management profiles].
Supplemental Guidance
Organizations define profiles for identity management based on open identity management standards. To ensure that open identity management standards are viable, robust, reliable, sustainable, and interoperable as documented, the Federal Government assesses and scopes the standards and technology implementations against applicable laws, executive orders, directives, policies, regulations, standards, and guidelines.
OT Discussion
Example compensating controls include implementing support external to the OT and multi-factor authentication.