ComplianceNIST 800-53 enhancement
NIST-AC-7(3) Biometric Attempt Limiting
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- AC Access Control
- Control
- AC-7(3)
Control statement
Limit the number of unsuccessful biometric logon attempts to [Assignment: number].
Discussion
Biometrics are probabilistic in nature. The ability to successfully authenticate can be impacted by many factors, including matching performance and presentation attack detection mechanisms. Organizations select the appropriate number of attempts for users based on organizationally-defined factors.
Related
Enhancement of · Compliance (1)
- NIST-AC-7 Unsuccessful Logon Attempts NIST 800-53 control
Related control · Compliance (1)
- NIST-IA-3 Device Identification and Authentication NIST 800-53 control