Authentication Feedback (03.05.11)_authentication-feedback
DevOps & SecurityAuthentication Feedback (03.05.11)_authentication-feedback is an Agent Skill for devops & security published in the CyberStrikeus/CyberStrike repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.
Authentication Feedback
How to use this skill
Bring this guide into your coding agent with a prompt tailored to the tool you use.
- Open your project in Codex.
- Copy and paste the prompt below.
- Review files and risks before approving any action.
Inspect the Agent Skill at https://github.com/CyberStrikeus/CyberStrike/blob/HEAD/.cyberstrike/skill/NIST/SP800-171_rev3/03.05_identification-and-authentication/Authentication Feedback (03.05.11)_authentication-feedback/SKILL.md and all supporting files. Report provenance, permissions, scripts, dependencies, and security risks. Propose an exact installation into .agents/skills/authentication-feedback-03-05-11-authentication-feedback, but wait for my approval before writing files or running scripts.
Copying this prompt does not install or run the skill. Review third-party files before use.
Authentication Feedback (03.05.11) Authentication Feedback
High-Level Description
Family: Identification and Authentication Framework: NIST SP 800-171 Rev 3 Applicability: Systems processing, storing, or transmitting CUI
Authentication Feedback
What to Check
- Verify Authentication Feedback (03.05.11) Authentication Feedback is implemented for CUI systems
- Review SSP documentation for Authentication Feedback (03.05.11)
- Validate CMMC Level 2 assessment objective for Authentication Feedback (03.05.11)
- Confirm POA&M addresses any gaps for Authentication Feedback (03.05.11)
How to Test
Step 1: Review System Security Plan
Examine the SSP for Authentication Feedback (03.05.11) implementation description and responsible parties.
Step 2: Assess Implementation
# Verify security controls protecting CUI
# Check access controls, encryption, monitoring as applicable
# For Linux systems:
ls -la /etc/security/ 2>/dev/null
grep -r "CUI\|controlled" /etc/security/ 2>/dev/null
# For cloud:
# Use cloud-audit-mcp tools to assess posture
Step 3: CMMC Assessment Validation
Verify this requirement passes CMMC Level 2 assessment methodology per SP 800-171A Rev 3.
Tools
| Tool | Purpose | Usage |
|---|---|---|
| cloud-audit-mcp | Assess cloud CUI environment | cloud_audit_* tools |
| Manual Review | SSP and POA&M review | Documentation analysis |
Remediation Guide
Requirement Statement
Implement Authentication Feedback per NIST SP 800-171 Rev 3.
Supplemental Guidance
Authentication feedback does not provide information that would allow unauthorized individuals to compromise authentication mechanisms. For example, for desktop or notebook systems with relatively large monitors, the threat may be significant (commonly referred to as shoulder surfing). For mobile devices with small displays, this threat may be less significant and is balanced against the increased likelihood of input errors due to small keyboards. Therefore, the means of obscuring authenticator feedback is selected accordingly. Obscuring feedback includes displaying asterisks when users type passwords into input devices or displaying feedback for a limited time before fully obscuring it.
Risk Assessment
| Finding | Severity | Impact |
|---|---|---|
| Authentication Feedback (03.05.11) Authentication Feedback not implemented | High | CUI Protection - Identification and Authentication |
| Authentication Feedback (03.05.11) partially implemented (POA&M) | Medium | CMMC certification risk |
CWE Categories
| CWE ID | Title |
|---|---|
| CWE-287 | Improper Authentication |
References
Checklist
- SSP documents Authentication Feedback (03.05.11) implementation
- Evidence of operating effectiveness collected
- POA&M addresses any gaps
- CMMC assessment objective met
- Continuous monitoring active