CCI-004071
CCI-004071 Definition
Defines the external organizations used to federate credentials.
| Status | |
| Type | CheckType.policy |
Master Assessment Datasheet
Implementation Guidance
Determine if [IA-05(09)_ODP; external organizations to be used for federating credentials are defined] are used to federate credentials.
Validation Procedures
Examine: [SELECT FROM: Identification and authentication policy; procedures addressing authenticator management; procedures addressing account management; system security plan; security agreements; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with authenticator management responsibilities; organizational personnel with information security responsibilities; system/network administrators]. Test: [SELECT FROM: Mechanisms supporting and/or implementing safeguards for authenticator management].