NIST 800-53 r5 · Controls catalogue · Family IA
IA-4Identifier Management
Manage system identifiers by: Receiving authorization from {{ insert: param, ia-04_odp.01 }} to assign an individual, group, role, service, or device identifier; Selecting an identifier that identifies an individual, group, role, service, or device; Assigning the identifier to the intended individual, group, role, service, or device; and Preventing reuse of identifiers for {{ insert: param, ia-04_odp.02 }}.
Last updated: 04 July 2026 00:28 UTC
Cumulative inbound coverage
How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.
Collective: mostly · 7 mapping(s) from 2 framework(s): ASVS 5.0 6 (partial) · CSF 2.0 1 (mostly)
Implementations targeting this control (0)
- No implementations targeting this control yet.
ATT&CK techniques this control mitigates (36)
- T1003 OS Credential Dumping Credential Access
- T1003.005 Cached Domain Credentials Credential Access
- T1003.006 DCSync Credential Access
- T1021.001 Remote Desktop Protocol Lateral Movement
- T1021.005 VNC Lateral Movement
- T1053 Scheduled Task/Job Execution, Persistence, Privilege Escalation
- T1053.002 At Execution, Persistence, Privilege Escalation
- T1053.005 Scheduled Task Execution, Persistence, Privilege Escalation
- T1098.007 Additional Local or Domain Groups Persistence, Privilege Escalation
- T1110 Brute Force Credential Access
- T1110.001 Password Guessing Credential Access
- T1110.002 Password Cracking Credential Access
- T1110.003 Password Spraying Credential Access
- T1110.004 Credential Stuffing Credential Access
- T1213 Data from Information Repositories Collection
- T1213.001 Confluence Collection
- T1213.002 Sharepoint Collection
- T1213.004 Customer Relationship Management Software Collection
- T1213.005 Messaging Applications Collection
- T1528 Steal Application Access Token Credential Access
- T1530 Data from Cloud Storage Collection
- T1537 Transfer Data to Cloud Account Exfiltration
- T1543 Create or Modify System Process Persistence, Privilege Escalation
- T1547.006 Kernel Modules and Extensions Persistence, Privilege Escalation
- T1550.001 Application Access Token Lateral Movement
- T1552 Unsecured Credentials Credential Access
- T1552.005 Cloud Instance Metadata API Credential Access
- T1563 Remote Service Session Hijacking Lateral Movement
- T1578 Modify Cloud Compute Infrastructure Defense Impairment
- T1578.001 Create Snapshot Defense Impairment
- T1578.002 Create Cloud Instance Defense Impairment
- T1578.003 Delete Cloud Instance Defense Impairment
- T1602 Data from Configuration Repository Collection
- T1602.001 SNMP (MIB Dump) Collection
- T1602.002 Network Device Configuration Dump Collection
- T1685 Disable or Modify Tools Defense Impairment
Weaknesses this control addresses (7)AI
CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.
| CWE | Name | CVEs | Why this control addresses it |
|---|---|---|---|
CWE-862 | Missing Authorization | 9,346 | Requires explicit authorization before any identifier can be assigned, preventing missing authorization. |
CWE-284 | Improper Access Control | 5,367 | Ensures identifiers are properly authorized and assigned, supporting effective access control. |
CWE-287 | Improper Authentication | 4,908 | Provides unique, authorized identifiers that are foundational to preventing authentication weaknesses. |
CWE-863 | Incorrect Authorization | 3,515 | Enforces correct authorization checks during the identifier assignment process. |
CWE-285 | Improper Authorization | 1,356 | Mandates authorization for identifier assignment, reducing risks of improper authorization. |
CWE-286 | Incorrect User Management | 30 | Directly implements correct management of identifiers for individuals, groups, roles, services, and devices. |
CWE-642 | External Control of Critical State Data | 18 | Requires authorization and prevents reuse, mitigating external control of critical identifier state data. |
Top CVEs where this control is the strongest mitigation
| CVE | Risk | CVSS | EPSS | Match |
|---|---|---|---|---|
CVE-2025-47411 | 6.0 | 8.1 | 0.1479 | good |
CVE-2025-13609 UPD | 5.5 | 8.2 | 0.0038 | good |
CVE-2026-22665 | 5.5 | 8.1 | 0.0033 | good |
CVE-2025-29773 | 3.5 | 5.8 | 0.0027 | good |
CVE-2024-36555 | 7.0 | 9.8 | 0.0038 | good |
CVE-2025-7493 | 7.0 | 9.1 | 0.0052 | good |
CVE-2026-33665 | 5.5 | 7.5 | 0.0032 | partial |
CVE-2026-39976 | 5.5 | 7.1 | 0.0029 | good |
CVE-2026-24071 | 5.5 | 7.8 | 0.0015 | good |
CVE-2024-1524 | 5.5 | 7.7 | 0.0026 | good |
CVE-2026-25711 | 5.5 | 7.3 | 0.0032 | good |
CVE-2022-1631 | 5.5 | 8.8 | 0.0896 | good |
CVE-2026-35670 | 3.5 | 5.9 | 0.0024 | good |
CVE-2026-3256 UPD | 7.0 | 9.8 | 0.0053 | partial |
CVE-2022-1680 | 7.0 | 9.9 | 0.1547 | partial |
CVE-2025-24399 | 5.5 | 8.8 | 0.0053 | partial |
CVE-2024-8273 | 5.5 | 8.8 | 0.0027 | partial |
CVE-2025-7347 UPD | 5.5 | 8.8 | 0.0027 | partial |
CVE-2026-27647 | 5.5 | 7.3 | 0.0030 | partial |
CVE-2026-25778 | 5.5 | 7.3 | 0.0031 | partial |
CVE-2026-27764 | 5.5 | 7.3 | 0.0029 | partial |
CVE-2026-20748 | 5.5 | 7.3 | 0.0025 | partial |
CVE-2026-3693 | 5.5 | 7.3 | 0.0040 | partial |
CVE-2026-24912 | 5.5 | 7.3 | 0.0039 | partial |