id: "IA-07" title: "Cryptographic Module Authentication" family: "IA" family_name: "Identification and Authentication" sort_id: "ia-07" priority: "P1" implementation_level: "system"
Statement
Implement mechanisms for authentication to a cryptographic module that meet the requirements of applicable laws, executive orders, directives, policies, regulations, standards, and guidelines for such authentication.
Guidance
Authentication mechanisms may be required within a cryptographic module to authenticate an operator accessing the module and to verify that the operator is authorized to assume the requested role and perform services within that role.
Assessment Objective
mechanisms for authentication to a cryptographic module are implemented that meet the requirements of applicable laws, executive orders, directives, policies, regulations, standards, and guidelines for such authentication.
Identification and authentication policy
system security plan
procedures addressing cryptographic module authentication
system design documentation
system configuration settings and associated documentation
system audit records
other relevant documents or records
Organizational personnel with responsibility for cryptographic module authentication
organizational personnel with information security responsibilities
system/network administrators
system developers
Mechanisms supporting and/or implementing cryptographic module authentication