CCI-000176

Manage system authenticators by establishing initial authenticator content for authenticators issued by the organization.

Implementation Guidance

The organization being inspected/assessed defines and documents procedures for setting initial authenticator content.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented procedures for setting initial authenticator content to ensure they have been defined.

Compelling Evidence

1.) Signed and dated Key Management Policy 2.) Signed and dated Account Creation SOP for procedures setting initial authenticator content

The controls below (if any) were marked by NIST as being related to CCI-000176.