id: "IA-08(04)" title: "Use of Defined Profiles" family: "IA" family_name: "Identification and Authentication" sort_id: "ia-08.04" priority: "P1" implementation_level: "system" parent: "IA-08" enhancement: True
Statement
Conform to the following profiles for identity management {{ insert: param, ia-08.04_odp }}.
Guidance
Organizations define profiles for identity management based on open identity management standards. To ensure that open identity management standards are viable, robust, reliable, sustainable, and interoperable as documented, the Federal Government assesses and scopes the standards and technology implementations against applicable laws, executive orders, directives, policies, regulations, standards, and guidelines.
Assessment Objective
there is conformance with {{ insert: param, ia-08.04_odp }} for identity management.
Identification and authentication policy
system security plan
system design documentation
system configuration settings and associated documentation
system audit records
other relevant documents or records
Organizational personnel with system operations responsibilities
organizational personnel with information security responsibilities
system/network administrators
system developers
organizational personnel with account management responsibilities
Mechanisms supporting and/or implementing identification and authentication capabilities
mechanisms supporting and/or implementing conformance with profiles