GRCA Planeth
Du bist nicht angemeldet
Anmelden
Start
Quellen
›
IA-05 Authenticator Management
›
Standard - IA-05(13) Expiration of Cached Authenticators
+IA-05(13) Expiration of Cached Authenticators
IA-05(13) Expiration of Cached Authenticators
Control
Prohibit the use of cached authenticators after [Assignement: time period].
Discussion
Cached authenticators are used to authenticate to the local machine when the network is not available. If cached authentication information is out of date, the validity of the authentication information may be questionable.
Assessment Objective
the use of cached authenticators is prohibited after [Assignement: time period].
Assessment Method
Examine
Identification and authentication policy procedures addressing authenticator management system security plan system design documentation system configuration settings and associated documentation system audit records other relevant documents or records
Interview
Organizational personnel with authenticator management responsibilities organizational personnel with information security responsibilities system/network administrators system developers
1. Übersicht
Bezeichnung
Standard
1.1 Referenzen
1.2 Identifizierte Anforderungen
1.3 Zugehörige Regulierungen
2. Identifizierte Anforderungen
Anforderungen
Quelle
Anforderung
3. Zugehörige Regulierungen
Regulierungen
Quelle
Regulierung
Verknüpfte Vorgänge
Verknüpfungen
Verknüpfungstyp
Vorgang
is blocked by
IA-05(13) Expiration of Cached Authenticators – Assessment Procedure
is blocked by
Expiration of Cached Authenticators
NIST
-
https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final