id: "IA-03(03)" title: "Dynamic Address Allocation" family: "IA" family_name: "Identification and Authentication" sort_id: "ia-03.03" priority: "P1" implementation_level: "organization" parent: "IA-03" enhancement: True
Where addresses are allocated dynamically, standardize dynamic address allocation lease information and the lease duration assigned to devices in accordance with {{ insert: param, ia-3.3_prm_1 }} ; and
Audit lease information when assigned to a device.
Guidance
The Dynamic Host Configuration Protocol (DHCP) is an example of a means by which clients can dynamically receive network address assignments.
Assessment Objective: dynamic address allocation lease information assigned to devices where addresses are allocated dynamically are standardized in accordance with {{ insert: param, ia-03.03_odp.01 }};
Assessment Objective: dynamic address allocation lease duration assigned to devices where addresses are allocated dynamically are standardized in accordance with {{ insert: param, ia-03.03_odp.02 }};
Assessment Objective: lease information is audited when assigned to a device.
Identification and authentication policy
system security plan
procedures addressing device identification and authentication
system design documentation
system configuration settings and associated documentation
evidence of lease information and lease duration assigned to devices
device connection reports
system audit records
other relevant documents or records
Organizational personnel with operational responsibilities for device identification and authentication
organizational personnel with information security responsibilities
system/network administrators
system developers
Mechanisms supporting and/or implementing device identification and authentication capabilities
mechanisms supporting and/or implementing dynamic address allocation
mechanisms supporting and/or implanting auditing of lease information