Users, services, and hardware are authenticated

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records DE-0005 against IA-2 Identification and Authentication (Organizational Users), and CSF 2.0's own crosswalk names that control as an informative reference for PR.AA-03. Through SPARTA: SPARTA's catalog maps DE-0005 to countermeasure CM0002 COMSEC, and that countermeasure's own CSF references include PR.AA-03. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0011 against IA-2 Identification and Authentication (Organizational Users), and CSF 2.0's own crosswalk names that control as an informative reference for PR.AA-03. Through SPARTA: SPARTA's catalog maps EX-0011 to countermeasure CM0002 COMSEC, and that countermeasure's own CSF references include PR.AA-03. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0014 against IA-3 Device Identification and Authentication, and CSF 2.0's own crosswalk names that control as an informative reference for PR.AA-03. Through SPARTA: SPARTA's catalog maps EX-0014 to countermeasure CM0031 Authentication, and that countermeasure's own CSF references include PR.AA-03. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0014.02 against IA-3 Device Identification and Authentication, and CSF 2.0's own crosswalk names that control as an informative reference for PR.AA-03. Through SPARTA: SPARTA's catalog maps EX-0014.02 to countermeasure CM0031 Authentication; CM0067 Smart Contracts, and that countermeasure's own CSF references include PR.AA-03. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0014.03 against IA-3 Device Identification and Authentication, and CSF 2.0's own crosswalk names that control as an informative reference for PR.AA-03. Through SPARTA: SPARTA's catalog maps EX-0014.03 to countermeasure CM0031 Authentication, and that countermeasure's own CSF references include PR.AA-03. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records IA-0001.02 against IA-5 Authenticator Management, and CSF 2.0's own crosswalk names that control as an informative reference for PR.AA-03. Through SPARTA: SPARTA's catalog maps IA-0001.02 to countermeasure CM0004 Development Environment Security, and that countermeasure's own CSF references include PR.AA-03. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records IA-0005 against IA-3 Device Identification and Authentication, and CSF 2.0's own crosswalk names that control as an informative reference for PR.AA-03. Through SPARTA: SPARTA's catalog maps IA-0005 to countermeasure CM0002 COMSEC, and that countermeasure's own CSF references include PR.AA-03. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records IA-0005.02 against IA-3 Device Identification and Authentication, and CSF 2.0's own crosswalk names that control as an informative reference for PR.AA-03. Through SPARTA: SPARTA's catalog maps IA-0005.02 to countermeasure CM0002 COMSEC; CM0031 Authentication; CM0065 OSAM Dual Authorization, and that countermeasure's own CSF references include PR.AA-03. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records LM-0002 against IA-3 Device Identification and Authentication, and CSF 2.0's own crosswalk names that control as an informative reference for PR.AA-03. Through SPARTA: SPARTA's catalog maps LM-0002 to countermeasure CM0031 Authentication; CM0067 Smart Contracts, and that countermeasure's own CSF references include PR.AA-03. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records LM-0004 against IA-3 Device Identification and Authentication, and CSF 2.0's own crosswalk names that control as an informative reference for PR.AA-03. Through SPARTA: SPARTA's catalog maps LM-0004 to countermeasure CM0002 COMSEC; CM0031 Authentication; CM0065 OSAM Dual Authorization, and that countermeasure's own CSF references include PR.AA-03. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.