id: "IA-04(04)" title: "Identify User Status" family: "IA" family_name: "Identification and Authentication" sort_id: "ia-04.04" priority: "P1" implementation_level: "organization" parent: "IA-04" enhancement: True


Statement

Manage individual identifiers by uniquely identifying each individual as {{ insert: param, ia-04.04_odp }}.

Guidance

Characteristics that identify the status of individuals include contractors, foreign nationals, and non-organizational users. Identifying the status of individuals by these characteristics provides additional information about the people with whom organizational personnel are communicating. For example, it might be useful for a government employee to know that one of the individuals on an email message is a contractor.

Assessment Objective

individual identifiers are managed by uniquely identifying each individual as {{ insert: param, ia-04.04_odp }}.

Identification and authentication policy

system security plan

procedures addressing identifier management

procedures addressing account management

list of characteristics identifying individual status

other relevant documents or records

Organizational personnel with identifier management responsibilities

organizational personnel with information security responsibilities

system/network administrators

Mechanisms supporting and/or implementing identifier management