← NIST CSF 2.0 in plain English

PR.AA-03

Protect / Identity Management, Authentication, and Access Control

Users, services, and hardware are authenticated.

Think of it likeChecking ID before letting someone into your home.

In plain English

The family always verifies that someone is who they say they are before allowing them into the house.

Related CIS safeguards (unofficial mapping)

CIS 5.2: Use Unique PasswordsCIS 6.3: Require MFA for Externally-Exposed ApplicationsCIS 6.4: Require MFA for Remote Network AccessCIS 6.5: Require MFA for Administrative AccessCIS 12.5: Centralize Network Authentication, Authorization, and Auditing (AAA)CIS 13.9: Deploy Port-Level Access Control