Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-35408 | SRG-APP-000152-MAPP-NA | SV-46695r1_rule | Medium |
Description |
---|
Multifactor authentication is defined as: using two or more factors to achieve authentication. Factors include: (i) something a user knows (e.g., password/PIN); (ii) something a user has (e.g., cryptographic identification device, token); or (iii) something a user is (e.g., biometric). A non-privileged account is defined as an information system account with authorizations of a regular or non-privileged user. Local Access is defined as access to an organizational information system by a user (or process acting on behalf of a user) communicating through a direct connection without the use of a network. Rationale for non-applicability: This SRG does not impose any requirements for local authentication to mobile applications. Authentication to the mobile device is an acceptable proxy for authentication to the application on a single-user device. |
STIG | Date |
---|---|
Mobile Application Security Requirements Guide | 2013-01-04 |
Check Text ( C-43760r1_chk ) |
---|
This requirement is NA for the MAPP SRG. |
Fix Text (F-39953r1_fix) |
---|
The requirement is NA. No fix is required. |