IA-4(9): Attribute Maintenance and Protection

Control Family:

Identification and Authentication

Parent Control:

IA-4: Identifier Management

CSF v1.1 References:

PR.AC-1
PR.AC-6

Threats Addressed:

Information Disclosure

Baselines:

(Not part of any baseline)

Control is new to this version of the control set.

Control Statement

Maintain the attributes for each uniquely identified individual, device, or service in [Assignment: organization-defined protected central storage].

Supplemental Guidance

For each of the entities covered in IA-2, IA-3, IA-8, and IA-9, it is important to maintain the attributes for each authenticated entity on an ongoing basis in a central (protected) store.