Definition
Authentication is the process of confirming that an entity presenting a particular Identity is genuinely who or what it claims to be.
Human Explanation
The system verifies that a user, device or service is entitled to use the presented Identity.
Why it Matters
Effective Authentication reduces the Risk of unauthorised access to organisational Assets.
Conceptual Boundary
Authentication does not determine what a user may access. It confirms Identity only.
Practical Perspective
Strong Authentication reduces the Risk of account compromise even when some login information has been disclosed.