Xylok Scanner CCIs

Number	Definition	Status	Related
CCI-002011	The information system accepts FICAM-approved third-party credentials.	Draft	IA-8(2)
CCI-002012	The organization defines the information systems which will employ only FICAM-approved information system components.	Draft	IA-8(3)
CCI-002013	The organization employs only FICAM-approved information system components in organization-defined information systems to accept third-party credentials.	Draft	IA-8(3)
CCI-002014	The information system conforms to FICAM-issued profiles.	Draft	IA-8(4)
CCI-002015	Accept federated or PKI credentials that meet organization-defined policy.	Draft	IA-8(5)
CCI-002016	Verify federated PKI credentials that meet organization-defined policy.	Draft	IA-8(5)
CCI-002017	The organization defines the information system services requiring identification.	Draft	IA-9
CCI-002018	Defines the system services and applications requiring authentication.	Draft	IA-9
CCI-002019	The organization defines the security safeguards to be used when identifying information system services.	Draft	IA-9
CCI-002020	The organization defines the security safeguards to be used when authenticating information system services.	Draft	IA-9
CCI-002021	Uniquely identify organization-defined system services and applications before establishing communications with devices, users, or other services or applications.	Draft	IA-9
CCI-002022	Uniquely authenticate organization-defined system services and applications before establishing communications with devices, users, or other services or applications.	Draft	IA-9
CCI-002023	The organization ensures that service providers receive identification information.	Draft	IA-9(1)
CCI-002024	The organization ensures that service providers validate identification information.	Draft	IA-9(1)
CCI-002025	The organization ensures that service providers transmit identification information.	Draft	IA-9(1)
CCI-002026	The organization ensures that service providers receive authentication information.	Draft	IA-9(1)
CCI-002027	The organization ensures that service providers validate authentication information.	Draft	IA-9(1)
CCI-002028	The organization ensures that service providers transmit authentication information.	Draft	IA-9(1)
CCI-002029	The organization defines the services between which identification decisions are to be transmitted.	Draft	IA-9(2)
CCI-002030	The organization defines the services between which authentication decisions are to be transmitted.	Draft	IA-9(2)
CCI-002031	The organization ensures that identification decisions are transmitted between organization-defined services consistent with organizational policies.	Draft	IA-9(2)
CCI-002032	The organization ensures that authentication decisions are transmitted between organization-defined services consistent with organizational policies.	Draft	IA-9(2)
CCI-002033	Defines the specific circumstances or situations when individuals accessing the system employ organization-defined supplemental authentication techniques or mechanisms.	Draft	IA-10
CCI-002034	Defines the supplemental authentication techniques or mechanisms to be employed in specific organization-defined circumstances or situations by individuals accessing the system.	Draft	IA-10
CCI-002035	Require individuals accessing the system employ organization-defined supplemental authentication techniques or mechanisms under specific organization-defined circumstances or situations.	Draft	IA-10
CCI-002036	Defines the circumstances or situations under which users will be required to reauthenticate.	Draft	IA-11
CCI-002037	The organization defines the circumstances or situations under which devices will be required to reauthenticate.	Draft	IA-11
CCI-002038	The organization requires users to reauthenticate upon organization-defined circumstances or situations requiring reauthentication.	Draft	IA-11
CCI-002039	The organization requires devices to reauthenticate upon organization-defined circumstances or situations requiring reauthentication.	Draft	IA-11
CCI-002040	The organization requires that the registration process to receive an individual identifier includes supervisor authorization.	Draft	IA-4(2)