+IA-05(14) Managing Content of PKI Trust Stores

IA-05(14) Managing Content of PKI Trust Stores

Control

For PKI-based authentication, employ an organization-wide methodology for managing the content of PKI trust stores installed across all platforms, including networks, operating systems, browsers, and applications.

Discussion

An organization-wide methodology for managing the content of PKI trust stores helps improve the accuracy and currency of PKI-based authentication credentials across the organization.

Assessment Objective

an organization-wide methodology for managing the content of PKI trust stores is employed across all platforms, including networks, operating systems, browsers, and applications for PKI-based authentication.

Assessment Method

Examine

Identification and authentication policy procedures addressing authenticator management system security plan organizational methodology for managing content of PKI trust stores across installed all platforms system design documentation system configuration settings and associated documentation enterprise security architecture documentation enterprise architecture documentation other relevant documents or records

Interview

Organizational personnel with authenticator management responsibilities organizational personnel with information security responsibilities system/network administrators system developers

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
is blocked by IA-05(14) Managing Content of PKI Trust Stores – Assessment Procedure