Definitions
Authentication
The process of verifying the identity of a user, process, or device, which serves as a prerequisite for granting access to resources within an information system.
Public Key Infrastructure
A comprehensive framework of policies, roles, and technologies used to create, manage, distribute, use, store, and revoke digital certificates and public keys for secure communication and authentication.
Systems Identifiers
A system identifier is a unique value used to distinguish and recognize an entity within an information system. These identifiers can apply to: individuals (e.g., usernames, employee IDs); groups or roles (e.g., admin role ID); devices (e.g., MAC address, IP address); services or applications (e.g., API keys, service IDs).
Directive (IA-1 Identification Authentication)
GNB shall establish, implement, and maintain a formal Identification and Authentication Directive to ensure that all users, devices, and services accessing organizational information systems are uniquely identified, properly authenticated, and granted access only in accordance with approved security requirements.
Purpose
This directive defines the purpose, scope, roles, responsibilities, and compliance expectations governing the management of credentials, authentication mechanisms, and identity verification practices. It establishes the foundational governance necessary to verify identity, prevent unauthorized access, and protect organizational systems and information.
The objective of the Identification Authentication Directive is to ensure the identification and authentication of GNB information system users, processes and devices as a prerequisite to allowing access.
