IA-5(14): Managing Content Of Pki Trust Stores

Control Family:

Identification And Authentication

Parent Control:

IA-5: Authenticator Management

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

PR.AC-1
PR.AC-6
PR.AC-7

Threats Addressed:

Spoofing
Repudiation

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5:
IA-5(14): Managing Content of Pki Trust Stores

Control Statement

The organization, for PKI-based authentication, employs a deliberate organization-wide methodology for managing the content of PKI trust stores installed across all platforms including networks, operating systems, browsers, and applications.