Detections
Analytics
800-53|IA-5(7)
Title
NO EMBEDDED UNENCRYPTED STATIC AUTHENTICATORSDescription
The organization ensures that unencrypted static authenticators are not embedded in applications or access scripts or stored on function keys.Supplemental
Organizations exercise caution in determining whether embedded or stored authenticators are in encrypted or unencrypted form. If authenticators are used in the manner stored, then those representations are considered unencrypted authenticators. This is irrespective of whether that representation is perhaps an encrypted version of something else (e.g., a password).Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Category: IDENTIFICATION AND AUTHENTICATION
Parent Title: AUTHENTICATOR MANAGEMENT
Family: IDENTIFICATION AND AUTHENTICATION
Audit Items
View all Reference Audit Items