PR.AA-01 Identities and credentials for authorized users, services, and hardware are managed by the organization

Statement

Identities and credentials for authorized users, services, and hardware are managed by the organization

Example

Initiate requests for new access or additional access for employees, contractors, and others, and track, review, and fulfill the requests, with permission from system or data owners when needed

Example

Issue, manage, and revoke cryptographic certificates and identity tokens, cryptographic keys (i.e., key management), and other credentials

Example

Select a unique identifier for each device from immutable hardware characteristics or an identifier securely provisioned to the device

Example

Physically label authorized hardware with an identifier for inventory and servicing purposes

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

3. Zugehörige Regulierungen

Verknüpfte Vorgänge

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final