IA-11 Re-authentication
LowModerateHigh
Review IA-11
1. Set its parameters
No parameters to set for IA-11.
2. Record its status
Require users to re-authenticate when [Assignment: organization-defined circumstances or situations].
Discussion
In addition to the re-authentication requirements associated with device locks, organizations may require re-authentication of individuals in certain situations, including when roles, authenticators or credentials change, when security categories of systems change, when the execution of privileged functions occurs, after a fixed time period, or periodically.
ISO/IEC 27001:2022 Crosswalk
No ISO 27001 mapping published for this control.