Access to an agency's trusted internal network shall require all agency authorized users to authenticate themselves through use of an individually assigned user ID or other agency approved authentication mechanism (e.g., password, token, smart card). Network controls shall be developed and implemented by the agency to ensure that an authorized user can access only those network resources and services necessary to perform their assigned job responsibilities.
N.M. Admin. Code § 1.12.20.15