800-53|IA-2(2)

Title

NETWORK ACCESS TO NON-PRIVILEGED ACCOUNTS

Description

The information system implements multifactor authentication for network access to non-privileged accounts.

Reference Item Details

Category: IDENTIFICATION AND AUTHENTICATION

Parent Title: IDENTIFICATION AND AUTHENTICATION (ORGANIZATIONAL USERS)

Family: IDENTIFICATION AND AUTHENTICATION

Baseline Impact: MODERATE,HIGH

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1.3.10.2 Set 'Network access: Allow anonymous SID/Name translation' to 'Disabled'WindowsCIS Windows 8 L1 v1.0.0
1.1.3.10.4 Configure 'Network access: Named Pipes that can be accessed anonymously'WindowsCIS Windows 8 L1 v1.0.0
1.2 Ensure that Multi-Factor Authentication is 'Enabled' for All Non-Service AccountsGCPCIS Google Cloud Platform Foundation v4.0.0 L1
1.2.1 Set 'privilege 1' for local usersCiscoCIS Cisco IOS XE 16.x v2.1.0 L1
1.2.1 Set 'privilege 1' for local usersCiscoCIS Cisco IOS XE 17.x v2.2.1 L1
1.3 Ensure that Security Key Enforcement is Enabled for All Admin AccountsGCPCIS Google Cloud Platform Foundation v4.0.0 L2
1.4 Ensure multi-factor authentication (MFA) is turned on for all human users with password-based authenticationSnowflakeCIS Snowflake Foundations v1.0.0 L1
1.13 Ensure the operating system has the packages required for multifactor authenticationUnixCIS Red Hat Enterprise Linux 8 STIG v2.0.0 STIG
1.19 UBTU-24-100650UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.20 UBTU-24-100660UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.30 UBTU-24-100910UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.59 APPL-14-001150UnixCIS Apple macOS 14 (Sonoma) STIG v1.0.0 CAT I
1.78 UBTU-24-400020UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.102 UBTU-22-612010UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.124 APPL-14-003020UnixCIS Apple macOS 14 (Sonoma) STIG v1.0.0 CAT II
1.125 APPL-14-003030UnixCIS Apple macOS 14 (Sonoma) STIG v1.0.0 CAT II
1.126 APPL-14-003050UnixCIS Apple macOS 14 (Sonoma) STIG v1.0.0 CAT II
1.127 APPL-14-003051UnixCIS Apple macOS 14 (Sonoma) STIG v1.0.0 CAT II
1.128 APPL-14-003052UnixCIS Apple macOS 14 (Sonoma) STIG v1.0.0 CAT II
1.185 OL08-00-020250UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.207 WN10-SO-000140WindowsCIS Microsoft Windows 10 STIG v1.0.0 CAT I
1.208 RHEL-09-255035UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.209 RHEL-09-255040UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT I
1.226 WN16-SO-000250WindowsCIS Microsoft Windows Server 2016 STIG v4.0.0 MS CAT I
1.226 WN16-SO-000250WindowsCIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT I
1.228 WN19-SO-000210WindowsCIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT I
1.228 WN19-SO-000210WindowsCIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT I
1.228 WN22-SO-000210WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT I
1.228 WN22-SO-000210WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT I
1.339 RHEL-09-611160UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
2.1 Ensure Authentication is configuredWindowsCIS MongoDB 3.6 L1 Windows Audit v1.1.0
2.1 Ensure Authentication is configuredUnixCIS MongoDB 8 v1.0.0 L1 Unix
2.1 Ensure Authentication is configuredUnixCIS MongoDB 4 L1 OS Linux v1.0.0
2.1 Ensure Authentication is configuredWindowsCIS MongoDB 4 L1 OS Windows v1.0.0
2.1 Ensure Authentication is configuredWindowsCIS MongoDB 5 L1 OS Windows v1.2.0
2.1 Ensure Authentication is configuredWindowsCIS MongoDB 6 v1.2.0 L1 MongoDB
2.1 Ensure Authentication is configuredWindowsCIS MongoDB 7 v1.2.0 L1 Windows
2.1 Ensure Authentication is configuredWindowsCIS MongoDB 8 v1.0.0 L1 Windows
2.1 Ensure Authentication is configuredUnixCIS MongoDB 3.6 L1 Unix Audit v1.1.0
2.1 Ensure Authentication is configuredUnixCIS MongoDB 5 L1 OS Linux v1.2.0
2.1 Ensure Authentication is configuredUnixCIS MongoDB 6 v1.2.0 L1 MongoDB
2.1 Ensure Authentication is configuredUnixCIS MongoDB 7 v1.2.0 L1 Unix
2.2 Ensure that MongoDB does not bypass authentication via the localhost exceptionUnixCIS MongoDB 7 v1.2.0 L1 Unix
2.2 Ensure that MongoDB does not bypass authentication via the localhost exceptionWindowsCIS MongoDB 6 v1.2.0 L1 MongoDB
2.2 Ensure that MongoDB does not bypass authentication via the localhost exceptionUnixCIS MongoDB 3.6 L1 Unix Audit v1.1.0
2.2 Ensure that MongoDB does not bypass authentication via the localhost exceptionUnixCIS MongoDB 4 L1 OS Linux v1.0.0
2.2 Ensure that MongoDB does not bypass authentication via the localhost exceptionUnixCIS MongoDB 5 L1 OS Linux v1.2.0
2.2 Ensure that MongoDB does not bypass authentication via the localhost exceptionUnixCIS MongoDB 6 v1.2.0 L1 MongoDB
2.2 Ensure that MongoDB does not bypass authentication via the localhost exceptionUnixCIS MongoDB 8 v1.0.0 L1 Unix
2.2 Ensure that MongoDB does not bypass authentication via the localhost exceptionWindowsCIS MongoDB 3.6 L1 Windows Audit v1.1.0