1.9—1.9
>Control Description
DoD organizations and overall enterprise employ enterprise- level identity management and public key infrastructure (PKI) systems to track user, administrator and NPE identities across the network and ensure access is limited to only those who have the need and the right to know. Organizations can verify they need and have the right to access via credential management systems, identity governance and administration tools, and an access management tool. PKI systems can be federated but must either trust a central root certificate authority (CA) and/or cross-sign standardized organizational CA’s.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.