# PR.AA-01 — Identities and credentials for authorized users, services, and hardware are managed by the organization

- **Subcategory ID:** PR.AA-01
- **CSF function:** [PR](/md/csf/PR.md) — Protect

## Mapped controls

- [AC-1](/md/controls/AC-1.md)
- [AC-14](/md/controls/AC-14.md)
- [AC-2](/md/controls/AC-2.md)
- [IA-1](/md/controls/IA-1.md)
- [IA-10](/md/controls/IA-10.md)
- [IA-11](/md/controls/IA-11.md)
- [IA-2](/md/controls/IA-2.md)
- [IA-3](/md/controls/IA-3.md)
- [IA-4](/md/controls/IA-4.md)
- [IA-5](/md/controls/IA-5.md)
- [IA-6](/md/controls/IA-6.md)
- [IA-7](/md/controls/IA-7.md)
- [IA-8](/md/controls/IA-8.md)
- [IA-9](/md/controls/IA-9.md)

---

Derived from official NIST publications (NIST SP 800-53 Rev 5 and NIST CSF 2.0). nistcontrols.com is not affiliated with NIST.