+IA-05(07) No Embedded Unencrypted Static Authenticators

IA-05(07) No Embedded Unencrypted Static Authenticators

Control

Ensure that unencrypted static authenticators are not embedded in applications or other forms of static storage.

Discussion

In addition to applications, other forms of static storage include access scripts and function keys. Organizations exercise caution when determining whether embedded or stored authenticators are in encrypted or unencrypted form. If authenticators are used in the manner stored, then those representations are considered unencrypted authenticators.

Assessment Objective

unencrypted static authenticators are not embedded in applications or other forms of static storage.

Assessment Method

Examine

Identification and authentication policy system security plan procedures addressing authenticator management system design documentation system configuration settings and associated documentation logical access scripts application code reviews for detecting unencrypted static authenticators other relevant documents or records

Interview

Organizational personnel with authenticator management responsibilities organizational personnel with information security responsibilities system/network administrators system developers

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
is blocked by IA-05(07) No Embedded Unencrypted Static Authenticators – Assessment Procedure
is blocked by No Embedded Unencrypted Static Authenticators