← NIST CSF 2.0 in plain English

PR.AA-01

Protect / Identity Management, Authentication, and Access Control

Identities and credentials for authorized users, services, and hardware are managed by the organization.

Think of it likeKeeping track of who has keys to your home.

In plain English

The family manages and tracks who has keys to the house, ensuring that only trusted people can enter.

Related CIS safeguards (unofficial mapping)

CIS 4.7: Manage Default Accounts on Enterprise Assets and SoftwareCIS 5.1: Establish and Maintain an Inventory of AccountsCIS 5.2: Use Unique PasswordsCIS 5.3: Disable Dormant AccountsCIS 5.5: Establish and Maintain an Inventory of Service AccountsCIS 5.6: Centralize Account ManagementCIS 6.6: Establish and Maintain an Inventory of Authentication and Authorization Systems