ISM-0620

Only users and services authenticated and authorised to a gateway can use the gateway.

Topic
Gateway authentication
Applicable to
all

History

Priority
must
Mar 2022
Removed
The existing recommendation that users be authenticated to gateways (ISM-0620) was rescinded due to duplication with the existing recommendation that users be authentication to systems (ISM-1546). In addition, the recommendation to use multi-factor authentication (ISM-1039) was rescinded due to duplication of existing multi-factor authentication recommendations (ISM-0974 and ISM-1173).
2015
Agencies must ensure that only users authenticated and authorised to a gateway can usethe gateway.
2010
Agencies must ensure that only system users authenticated and authorised to a gateway can use the gateway.
2008
Agencies must ensure that the use of the CDS is limited to authorised system users.