An error occurred:

CCIs

Number Definition Status Related
CCI-004082 Defines the controls for protecting the passwords. Draft
CCI-004083 Accept only external credentials that are NIST compliant. Draft
CCI-004084 Document and maintain a list of accepted external authenticators. Draft
CCI-004085 Conform to organization-defined identity management profiles for identity management. Draft
CCI-004086 Defines the identity management profiles for conforming to the profiles for identity management. Draft
CCI-004087 Defines the policy for accepting and verifying federated or PKI credentials. Draft
CCI-004088 Implement organization-defined measures to disassociate user attributes or identifier assertion relationships among individuals. Draft
CCI-004089 Implement organization-defined measures to disassociate user attributes or identifier assertion relationships among credential service providers. Draft
CCI-004090 Implement organization-defined measures to disassociate user attributes or identifier assertion relationships among relying parties. Draft
CCI-004091 Defines the measures to be implemented to disassociate user attributes or identifier assertion relationships among individuals, credential service providers, and relying parties. Draft
CCI-004092 Identity proof users that require accounts for logical access to systems based on appropriate identity assurance level requirements as specified in applicable standards. Draft
CCI-004093 Identity proof users that require accounts for logical access to systems based on appropriate identity assurance level requirements as specified in applicable guidelines. Draft
CCI-004094 Resolve user identities to a unique individual. Draft
CCI-004095 Collect identity evidence. Draft
CCI-004096 Validate identity evidence. Draft
CCI-004097 Verify identity evidence. Draft
CCI-004098 Require that the registration process to receive an account for logical access includes supervisor or sponsor authorization. Draft
CCI-004099 Require evidence of individual identification be presented to the registration authority. Draft
CCI-004100 Require that the presented identity evidence be validated through organizational defined methods of validation. Draft
CCI-004101 Require that the presented identity evidence be verified through organizational defined methods of verification. Draft
CCI-004102 Defines the methods of validation required for presenting identity evidence. Draft
CCI-004103 Defines the methods of verification required for presenting identity evidence. Draft
CCI-004104 Require that the validation of identity evidence be conducted in person before a designated registration authority. Draft
CCI-004105 Require that the verification of identity evidence be conducted in person before a designated registration authority. Draft
CCI-004106 Require that a registration code or notice of proofing be delivered through an out-of-band channel to verify the users address (physical or digital) of record. Draft
CCI-004107 Accept externally-proofed identities at an organization-defined identity assurance level. Draft
CCI-004108 Defines the identity assurance level by accepting externally-proofed identities. Draft
CCI-004109 Develop and document an organization-level; mission/business process-level; and/or system-level incident response policy that is consistent with applicable laws, executive orders, directives, regulations, policies, standards, and guidelines. Draft
CCI-004110 Designate an organization-defined official to manage the incident response policy. Draft
CCI-004111 Designate an organization-defined official to manage the incident response procedures. Draft