id: "IA-12(01)" title: "Supervisor Authorization" family: "IA" family_name: "Identification and Authentication" sort_id: "ia-12.01" priority: "P1" implementation_level: "organization" parent: "IA-12" enhancement: True
Statement
Require that the registration process to receive an account for logical access includes supervisor or sponsor authorization.
Guidance
Including supervisor or sponsor authorization as part of the registration process provides an additional level of scrutiny to ensure that the user’s management chain is aware of the account, the account is essential to carry out organizational missions and functions, and the user’s privileges are appropriate for the anticipated responsibilities and authorities within the organization.
Assessment Objective
the registration process to receive an account for logical access includes supervisor or sponsor authorization.
Identification and authentication policy
procedures addressing identity proofing
system security plan
other relevant documents or records
Organizational personnel with system operations responsibilities
organizational personnel with information security responsibilities
system/network administrators
system developers
organizational personnel with identification and authentication responsibilities
Mechanisms supporting and/or implementing identification and authentication capabilities