CCI-000203

Implementation Guidance

The organization being inspected/assessed documents and implements requirements that unencrypted static authenticators not be stored on function keys.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the requirements that unencrypted static authenticators not be stored on function keys to ensure the organization being inspected/assessed ensures unencrypted static authenticators are not stored on function keys.

Compelling Evidence

1.) Signed and dated SOP/TTP documenting that unencrypted static authenticators not be stored on function keys.