| name | Authenticator Management (03.05.12)_authenticator-management |
| description | Verify the identity of the individual, group, role, service, or device receiving the authenticator as part of the initial authenticator distribution. |
| category | authentication |
| version | 3.0 |
| author | cyberstrike-official |
| tags | ["nist","sp800-171","rev3","authenticator management (03-05-12)","family-03.05","cui-protection","cmmc"] |
| tech_stack | ["aws","azure","active-directory","linux","windows"] |
| cwe_ids | ["CWE-287"] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
Authenticator Management (03.05.12) Authenticator Management
High-Level Description
Family: Identification and Authentication
Framework: NIST SP 800-171 Rev 3
Applicability: Systems processing, storing, or transmitting CUI
Verify the identity of the individual, group, role, service, or device receiving the authenticator as part of the initial authenticator distribution.
Establish initial authenticator content for any authenticators issued by the organization.
Establish and implement administrative procedures for initial authenticator distribution; for lost, compromised, or damaged authenticators; and for revoking authenticators.
Change default authenticators at first use.
Change or refresh authenticators [organization-defined] or when the following events occur: [organization-defined].
Protect authenticator content from unauthorized disclosure and modification.
What to Check
How to Test
Step 1: Review System Security Plan
Examine the SSP for Authenticator Management (03.05.12) implementation description and responsible parties.
Step 2: Assess Implementation
# Verify security controls protecting CUI
# Check access controls, encryption, monitoring as applicable
# For Linux systems:
ls -la /etc/security/ 2>/dev/null
grep -r "CUI\|controlled" /etc/security/ 2>/dev/null
# For cloud:
# Use cloud-audit-mcp tools to assess posture
Step 3: CMMC Assessment Validation
Verify this requirement passes CMMC Level 2 assessment methodology per SP 800-171A Rev 3.
Tools
| Tool | Purpose | Usage |
|---|
| cloud-audit-mcp | Assess cloud CUI environment | cloud_audit_* tools |
| Manual Review | SSP and POA&M review | Documentation analysis |
Remediation Guide
Requirement Statement
Verify the identity of the individual, group, role, service, or device receiving the authenticator as part of the initial authenticator distribution.
Establish initial authenticator content for any authenticators issued by the organization.
Establish and implement administrative procedures for initial authenticator distribution; for lost, compromised, or damaged authenticators; and for revoking authenticators.
Change default authenticators at first use.
Change or refresh authenticators [organization-defined] or when the following events occur: [organization-defined].
Protect authenticator content from unauthorized disclosure and modification.
