+IA-03(04) Device Attestation
|
IA-03(04) Device Attestation
Control
Handle device identification and authentication based on attestation by [Assignement: configuration management process].
Discussion
Device attestation refers to the identification and authentication of a device based on its configuration and known operating state. Device attestation can be determined via a cryptographic hash of the device. If device attestation is the means of identification and authentication, then it is important that patches and updates to the device are handled via a configuration management process such that the patches and updates are done securely and do not disrupt identification and authentication to other devices.
Assessment Objective
device identification and authentication are handled based on attestation by [Assignement: configuration management process].
Assessment Method
Examine
Identification and authentication policy
system security plan
procedures addressing device identification and authentication
procedures addressing device configuration management
system design documentation
system configuration settings and associated documentation
configuration management records
change control records
system audit records
other relevant documents or records
Interview
Organizational personnel with operational responsibilities for device identification and authentication
organizational personnel with information security responsibilities
system/network administrators
1. Přehled
1.1 Odkazy
1.2 Identifikované požadavky
1.3 Související regulace
2. Identifikované požadavky
Požadavky
| Zdroj |
Požadavek |
3. Související regulace
Propojené úkoly
|