CCI-001969
CCI-001969 Definition
Handle device authentication based on attestation is handled by the organization-defined configuration management process.
Status | |
Type | CheckType.policy |
Master Assessment Datasheet
Implementation Guidance
The organization being inspected/assessed ensures that device authentication based on attestation is handled by the configuration management process defined in IA-3 (4), CCI 1965.
Validation Procedures
The organization conducting the inspection/assessment obtains and examines the documented configuration management process to ensure the organization being inspected/assessed has device authentication based on attestation handled via the configuration management process.
Compelling Evidence
1.) Signed and dated Configuration Management Policy, referencing device authentication section.