03.05.05E Expiration of Cached Authenticators

Statement

Prohibit the use of cached authenticators after {{ insert: param, A.03.05.05E.ODP.01 }}.

Guidance

Cached authenticators are used to authenticate to a local machine when the network is not available. If cached authentication information is out of date, the validity of the authentication information may be questionable. This requirement enhances SP 800-171 requirement 03.05.07.

Statement

• (includes preempt) Ensure that the threat event does not have an impact.

  • Reduce likelihood of occurrence and/or reduce likelihood of impact.

  • The adversary’s efforts or resources cannot be applied or are wasted.

• (includes exert) Make it more difficult for threat events to cause adverse impacts or consequences.

  • Reduce likelihood of impact and reduce level of impact.

  • Adversary activities are restricted in scope, fail to achieve full effect, do not take place in accordance with adversary timeline, or require greater resources than adversary had planned.

Assessment objective

the use of cached authenticators is prohibited after {{ insert: param, A.03.05.05E.ODP.01 }}.

Assessment method

• Identification and authentication policy procedures addressing authenticator management system security plan system design documentation system configuration settings and associated documentation system audit records other relevant documents or records

Assessment method

• Personnel with authenticator management responsibilities personnel with information security responsibilities system/network administrators system developers

Assessment method

• Mechanisms supporting and/or implementing authenticator management capabilities

1. Forbhreathnú

1.1 Tagairtí

1.2 Ceanglais aitheanta

1.3 Rialacháin ghaolmhara

2. Ceanglais aitheanta

3. Rialacháin ghaolmhara

Saincheisteanna nasctha

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final