Skip to content

Authentication Protocol

What is Authentication Protocol?

A set of rules governing the exchange of information for verifying the identity of a user, device, or system in a communication.

Information Security

Frameworks that govern authentication protocol

ISO 27001:2022View framework →NIST SP 800-53 Rev 5View framework →

What the standards actually require on authentication protocol

Requirements naming authentication protocol across 3 standards, quoted from the control text.

ISO/IEC 29115:2023 - Entity Authentication Assurance Framework1 control

Use authentication protocols resistant to relevant threats including replay, eavesdropping, and man in the middle.

ISO29115-7.1 · Authentication Protocol Requirements →
Australian Information Security Manual1 control

When multi-factor authentication is used to authenticate users or customers to online services or online customer services, all other authentication protocols that do not support multi-factor authentication are disabled.

ISM-1919 · When multi-factor authentication is used to authenticate users or customers to online serv →
NIST SP 800-63 Digital Identity Guidelines1 control

Implement AAL3 authentication per NIST SP 800-63B Section 4.3. AAL3 requires (a) Multi-Factor Cryptographic Hardware authenticator OR Single-Factor Cryptographic Hardware combined with a memorised secret OR Multi-Factor One-Time Password Device combined with a...

NISTSP63-6 · AAL3 Authentication: Hardware Cryptographic, Verifier Impersonation Resistance, Phishing Resistance →

Questions people ask about authentication protocol

What is Authentication Protocol?
A set of rules governing the exchange of information for verifying the identity of a user, device, or system in a communication.
Why is Authentication Protocol important for compliance?
Authentication Protocol is a key concept in Information Security. Understanding authentication protocol helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Authentication Protocol?
Authentication Protocol appears in the requirement text of ISO/IEC 29115:2023 - Entity Authentication Assurance Framework, Australian Information Security Manual, NIST SP 800-63 Digital Identity Guidelines. Across these standards we have identified 3 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Authentication Protocol?
Explore our compliance framework pages to see how authentication protocol applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Authentication Protocol applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.