---

id: "PR.AC-01" title: "Identity Management and Access Control" function: "PR" function_name: "Protect" category: "PR.AC" category_name: "Identity Management and Access Control" description: "Identities and credentials for authorized users and services are managed." controls: - IA-1 - IA-10 - IA-11 - IA-2 - IA-3 - IA-4 - IA-5 - IA-6 - IA-7 - IA-8 - IA-9

---

PR.AC-01: Identity Management and Access Control

Description

Identities and credentials for authorized users and services are managed.

Category Context

Function: PR — Protect Category: PR.AC — Identity Management and Access Control

Access to assets and systems is managed and controlled.

Mapped SP 800-53 Controls

• IA-1 (Identification and Authentication) — View Control
• IA-10 (Identification and Authentication) — View Control
• IA-11 (Identification and Authentication) — View Control
• IA-2 (Identification and Authentication) — View Control
• IA-3 (Identification and Authentication) — View Control
• IA-4 (Identification and Authentication) — View Control
• IA-5 (Identification and Authentication) — View Control
• IA-6 (Identification and Authentication) — View Control
• IA-7 (Identification and Authentication) — View Control
• IA-8 (Identification and Authentication) — View Control
• IA-9 (Identification and Authentication) — View Control