3GPP 5G Security Architecture (TS 33.501) TS33.501-6.1: Authentication Framework

What else in your programme already covers this

This control maps to 72 controls across 30 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

NIST SP 800-53 Rev 5 · 4 controls

NIST800-IA-2 IA-2 Identification and Authentication (Organizational Users)
NIST800-IA-4 IA-4 Identifier Management
NIST800-IA-7 IA-7 Cryptographic Module Authentication
NIST800-IA-8 IA-8 Identification and Authentication (Non-organizational Users)

CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 · 3 controls

CPG-1.A Changing Default Passwords
CPG-1.C Unique Credentials
CPG-4.C Basic Cybersecurity Training

ISO/IEC 29115:2013 - Entity Authentication Assurance Framework · 3 controls

29115-11 Mapping other authentication schemes
29115-12.1 Exchanging authentication results
29115-12.2 Controls for mitigating threats

UK Open Banking Standard · 3 controls

OB-CX.3 Strong Customer Authentication
OB-DIR.1 Open Banking Directory
OB-SEC.4 Certificate Management

ASD Strategies to Mitigate Cyber Security Incidents · 2 controls

ASD37-20 Multi-factor authentication (Essential)
ASD37-23 Protect authentication credentials (Excellent)

Illinois Biometric Information Privacy Act (BIPA) · 2 controls

BIPA-SEC5-1 Biometric Identifier Definition
BIPA-SEC5-2 Biometric Information Definition

NIST Cybersecurity Framework 2.0 · 2 controls

NIST-CSF-PR.AA-01 Identities and credentials for authorized users, services, and hardware are managed by the organization
NIST-CSF-PR.AA-02 Identities are proofed and bound to credentials based on the context of interactions

AML/CTF Act 2006 (Australia) · 1 control

AMLCTF-35 Identity Verification Standard

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) · 1 control

AWWA-2.2 Authentication Mechanisms

Armenia Law on Protection of Personal Data (2015) · 1 control

AM-DPA-10 Retention and Deletion

BSI IT-Grundschutz · 1 control

BSI-03 Multi-factor authentication requirements

Bank Secrecy Act / Anti-Money Laundering (BSA/AML) · 1 control

BSA-CIP-2 Identity Verification

DAMA-DMBOK2 - Data Management Body of Knowledge (2nd Edition) · 1 control

DSO-3 Data Access Management

ISO 27799:2025 · 1 control

ISO27799-12 Unique user identification and authentication

ISO/IEC 23837:2023 · 1 control

23837-1.7.3 Authentication and classical post-processing

ISO/IEC 27043:2015 · 1 control

ISO27043-13 Authentication and password management

ISO/IEC 27400:2022 · 1 control

27400-6.1 Secure Device Design

ISO/SAE 21434 · 1 control

ISO21434-13 Authentication and password management

ITU-T X.805 - Security Architecture for End-to-End Communications · 1 control

X805-Dim2-Authentication-Identity-Verification-Claimed-Identities-Entities-Communication ITU-T X.805 Security Dimension 2 - Authentication + Identity Verification + Claimed Identity + Entity Authentication + Data Origin Authentication + Mutual Authentication + Multi-Factor + Cryptographic Authentication

NIST SP 800-124 Revision 2 - Guidelines for Managing the Security of Mobile Devices · 1 control

MD124-CTL-01 Device Authentication and Lock

NIST SP 800-187 · 1 control

SP800-187-SEC-UEAUTH UE Authentication

NIST SP 800-190 · 1 control

NIST190-07 Multi-factor authentication for cloud

SSAE 18 - Attestation Standards (SOC Reporting) · 1 control

SSAE18-CC6.2 CC6.2 - New User Registration and Authorization

South Korea ISMS-P · 1 control

ISMSP-AC-03 Authentication Mechanisms

TISAX - Trusted Information Security Assessment Exchange · 1 control

TISAX-TECH-01 Access Control and Identity Management

UK Telecommunications (Security) Act 2021 · 1 control

UK-TSA-NET-02 Access Control and Authentication

US Consumer Product Safety Act (CPSC) Manufacturer and Importer Duties · 1 control

CPSC-CS.2 Authentication and Access Controls

US Maritime Transportation Security Act (MTSA) and USCG Cybersecurity Requirements · 1 control

CYB-2 Account Security Measures

W3C Verifiable Credentials (VC) Data Model 2.0 · 1 control

VP-2 Holder Binding

WCAG 2.2 · 1 control

WCAGREC-3 Principle 3: Understandable

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.