3.3.9: Accessible Authentication (Enhanced) [AAA]
Description
A cognitive function test (such as remembering a password or solving a puzzle) is not required for any step in an authentication process unless that step provides at least one of the following:
- Alternative
- Another authentication method that does not rely on a cognitive function test.
- Mechanism
- A mechanism is available to assist the user in completing the cognitive function test.
Sufficient Techniques
No sufficient techniques for this SC.
Advisory Techniques
No advisory techniques for this SC.
Failures
No failures for this SC.