IA-5(14): Managing Content of Pki Trust Stores

Control Family:

Identification and Authentication

Parent Control:

IA-5: Authenticator Management

CSF v1.1 References:

PR.AC-1
PR.AC-6
PR.AC-7

Threats Addressed:

Spoofing
Repudiation

Baselines:

(Not part of any baseline)

Previous Version:

NIST Special Publication 800-53 Revision 4:
IA-5(14): Managing Content Of Pki Trust Stores

Control Statement

For PKI-based authentication, employ an organization-wide methodology for managing the content of PKI trust stores installed across all platforms, including networks, operating systems, browsers, and applications.

Supplemental Guidance

An organization-wide methodology for managing the content of PKI trust stores helps improve the accuracy and currency of PKI-based authentication credentials across the organization.