+SC-23(05) Allowed Certificate Authorities

SC-23(05) Allowed Certificate Authorities

Control

Only allow the use of [Assignement: certificated authorities] for verification of the establishment of protected sessions.

Discussion

Reliance on certificate authorities for the establishment of secure sessions includes the use of Transport Layer Security (TLS) certificates. These certificates, after verification by their respective certificate authorities, facilitate the establishment of protected sessions between web clients and web servers.

Assessment Objective

only the use of [Assignement: certificated authorities] for verification of the establishment of protected sessions is allowed.

Assessment Method

Examine

System and communications protection policy procedures addressing session authenticity system design documentation system configuration settings and associated documentation list of certificate authorities allowed for verification of the establishment of protected sessions system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
is blocked by SC-23(05) Allowed Certificate Authorities – Assessment Procedure
is blocked by Certificate Authorities