Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-35407 | SRG-APP-000151-MAPP-NA | SV-46694r1_rule | Medium |
Description |
---|
Multifactor authentication is defined as: using two or more factors to achieve authentication. Factors include: (i) something a user knows (e.g., password/PIN); (ii) something a user has (e.g., cryptographic identification device, token); or (iii) something a user is (e.g., biometric). A privileged account is defined as an information system account with authorizations of a privileged user. Local Access is defined as access to an organizational information system by a user (or process acting on behalf of a user) communicating through a direct connection without the use of a network. Rationale for non-applicability: This SRG applies to single-user applications. These users do not have privileged accounts. |
STIG | Date |
---|---|
Mobile Application Security Requirements Guide | 2013-01-04 |
Check Text ( C-43759r1_chk ) |
---|
This requirement is NA for the MAPP SRG. |
Fix Text (F-39952r1_fix) |
---|
The requirement is NA. No fix is required. |