IA-5(9): Cross-Organization Credential Management

Control Family:

Identification And Authentication

Parent Control:

IA-5: Authenticator Management

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

PR.AC-1
PR.AC-6
PR.AC-7

Threats Addressed:

Spoofing

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5.2.0:
IA-5(9): Federated Credential Management

Control Statement

The organization coordinates with [Assignment: organization-defined external organizations] for cross-organization management of credentials.

Supplemental Guidance

Cross-organization management of credentials provides the capability for organizations to appropriately authenticate individuals, groups, roles, or devices when conducting cross-organization activities involving the processing, storage, or transmission of information.