graphgrc

SCF - IAC-10.2 - PKI-Based Authentication

Automated mechanisms exist to validate certificates by constructing and verifying a certification path to an accepted trust anchor including checking certificate status information for PKI-based authentication.

Mapped framework controls

NIST 800-53

Control questions

Does the organization use automated mechanisms to validate certificates by constructing and verifying a certification path to an accepted trust anchor including checking certificate status information for PKI-based authentication?