# SC-23 — Session Authenticity

- **Control ID:** SC-23
- **Family:** [SC](/md/families/SC.md)
- **Baselines:** moderate, high
- **Enhancement of:** No content available.

## Description

Protect the authenticity of communications sessions.

## Discussion

Protecting session authenticity addresses communications protection at the session level, not at the packet level. Such protection establishes grounds for confidence at both ends of communications sessions in the ongoing identities of other parties and the validity of transmitted information. Authenticity protection includes protecting against "man-in-the-middle" attacks, session hijacking, and the insertion of false information into sessions.

## Implementation guidance

No content available.

## CSF 2.0 subcategories

No content available.

## Related controls

- [AU-10](/md/controls/AU-10.md)
- [SC-8](/md/controls/SC-8.md)
- [SC-10](/md/controls/SC-10.md)
- [SC-11](/md/controls/SC-11.md)

---

Derived from official NIST publications (NIST SP 800-53 Rev 5 and NIST CSF 2.0). nistcontrols.com is not affiliated with NIST.