Assessment Objective
Determine if:
- IA-05(09) [Assignment: external organizations] are used to federate credentials.
Assessment Methods
Examine
- Identification and authentication policy
- procedures addressing authenticator management
- procedures addressing account management
- system security plan
- security agreements
- other relevant documents or records
Interview
- Organizational personnel with authenticator management responsibilities
- organizational personnel with information security responsibilities
- system/network administrators
Test
- Mechanisms supporting and/or implementing safeguards for authenticator management
Gekoppelde issues
| Koppelingstype | Issue |
|---|---|
| blocks | IA-05(09) Federated Credential Management |