What are IA controls?
IA controls are the policies, settings, or mechanisms established to protect a resource. The control must meet or exceed the MAC level of the resource it is intended to protect. Simply stated, a MAC II or III control, cannot be used to meet a MAC I security requirement. A MAC I control can satisfy the requirements for any MAC II or III resource.