|
+PR.AA-01 Identities and credentials for authorized users, services, and hardware are managed by the organization |
PR.AA-01 Identities and credentials for authorized users, services, and hardware are managed by the organizationStatementIdentities and credentials for authorized users, services, and hardware are managed by the organization GuidanceInitiate requests for new access or additional access for employees, contractors, and others, and track, review, and fulfill the requests, with permission from system or data owners when needed GuidanceIssue, manage, and revoke cryptographic certificates and identity tokens, cryptographic keys (i.e., key management), and other credentials GuidanceSelect a unique identifier for each device from immutable hardware characteristics or an identifier securely provisioned to the device GuidancePhysically label authorized hardware with an identifier for inventory and servicing purposes 1. Overview
1.1 References1.2 Identified Requirements1.3 Related Regulations2. Identified Requirements
3. Related Regulations
Linked Issues |