IA-7: Cryptographic Module Authentication

NIST Baseline: Low

The information resource owner, or designee, is responsible for ensuring encryption mechanisms used on information resources comply with, at a minimum, the Federal Information Processing Standards Publication (FIPS) 140-3, Security Requirements for Cryptographic Modules.

Identification and Authentication (IA)

IA-1: Identification and Authentication – Policy and Procedures
IA-2: Identification and Authentication (Organizational Users)
IA-2(1): Identification and Authentication (Organizational Users) - Multifactor Authentication to Privileged Accounts
IA-2(2): Identification and Authentication (Organizational Users) - Multifactor Authentication to Non-Privileged Accounts
IA-4: Identifier Management
IA-5: Authenticator Management
IA-5(1): Authenticator Management – Password Based Authentication
IA-6: Authenticator Feedback
IA-7: Cryptographic Module Authentication
IA-8: Identification and Authentication (Non-Organizational Users)
IA-11: Re-Authentication
IA-12: Identity Proofing
IA-13: Identity Providers and Authorization Servers

2025 Tarleton State University. Site Policies Accessibility Sitemap Report a Website Problem