CCI-002367
CCI-002367 Definition
The organization ensures unencrypted static authenticators are not embedded in applications.
| Status | |
| Type | CheckType.policy |
Master Assessment Datasheet
Implementation Guidance
The organization being inspected/assessed documents and implements requirements that static authenticators are not embedded in applications.
Validation Procedures
The organization conducting the inspection/assessment obtains and examines the requirements that static authenticators are not embedded in applications to ensure the organization being inspected/assessed ensures unencrypted static authenticators are not embedded in applications.
Compelling Evidence
1.) Signed and dated SOP/TTP requiring that static authenticators are not embedded in applications.