CSIAC

Cyber Security and Information Systems Information Analysis Center

Multifactor Authentication – Meeting IA-2 Controls

Home › Forums › Groups Forums › Knowledge Management & Information Sharing › Protecting Controlled Unclassified Information › Multifactor Authentication – Meeting IA-2 Controls

  • Creator
    Topic
  • 2017-03-17 at 10:41 #9094
    bilsmith
    Participant

    IA-2(3) states the following –
    The information system implements multifactor authentication for network access to non-privileged accounts. (3) IDENTIFICATION AND AUTHENTICATION | LOCAL ACCESS TO PRIVILEGED ACCOUNTS

    With this in mind I assume the control makes no distinction between Local Area Access (local network access from within the same IS system) or network access coming in from external networks. Is the assumption correct that you would apply the same measure of Multifactor Authentication to either scenario?

    Thank You!

  • Creator
    Topic
Viewing 3 reply threads
  • Author
    Replies
    • 2017-03-17 at 10:50 #9095
      ariesbeck
      Moderator

      I believe that your assumption is correct. But, your explanation that this is internal comms within the IS makes me second guess myself. Not sure you would classify internal comms within the IS as “network access” since these controls relate to access to the IS, not within.

    • 2017-03-17 at 11:22 #9100
      bilsmith
      Participant

      Yes,

      I should have been clearer I mean local network access, networks that are directly connected to the IS.

    • 2017-03-17 at 12:45 #9112
      ariesbeck
      Moderator

      In that case I am not as conflicted. I believe the multifactor measure would definitely apply.

    • 2017-03-20 at 09:17 #9114
      wkastorff
      Participant

      The engineering team that I work with have gone round-and-round over over this topic. We concur with the multifactor response. We don’t believe their is a specific solution for all technologies, e.g. local physical access to a router. Physical security measures with specific processes may be the correct solution for certain problems.

  • Author
    Replies
Viewing 3 reply threads

You must be logged in to reply to this topic.