NIST 800-53 rev.5/Identification and Authentication/367 of 1011
IA-05 (16)Authenticator Management | In-person or Trusted External Party Authenticator Issuance
Control family: Identification and Authentication
Control description
Require that the issuance of [Assignment: organization-defined types of and/or specific authenticators] be conducted [Selection (one): in person; by a trusted external party] before [Assignment: organization-defined registration authority] with authorization by [Assignment: organization-defined personnel or roles].
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.