CCI-001974

Description	The organization defines the time period for which the reuse of identifiers is prohibited.
Assessment Procedure	IA-4.5
Organization Guidance	DoD has defined the time period as 1 year for user identifiers (DoD is not going to specify value for device identifier).
Auditor Guidance	The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the time period as 1 year for user identifiers (DoD is not going to specify value for device identifier).

Control IA-4 Identifier Management

STIG Rules

No STIG rules exist.