id: "IA-04(09)" title: "Attribute Maintenance and Protection" family: "IA" family_name: "Identification and Authentication" sort_id: "ia-04.09" priority: "P1" implementation_level: "system" parent: "IA-04" enhancement: True
Statement
Maintain the attributes for each uniquely identified individual, device, or service in {{ insert: param, ia-04.09_odp }}.
Guidance
For each of the entities covered in IA-2, IA-3, IA-8 , and IA-9 , it is important to maintain the attributes for each authenticated entity on an ongoing basis in a central (protected) store.
Assessment Objective
the attributes for each uniquely identified individual, device, or service are maintained in {{ insert: param, ia-04.09_odp }}.
Identification and authentication policy
system security plan
procedures addressing identifier management
procedures addressing account management
system design documentation
system configuration settings and associated documentation
system audit records
other relevant documents or records
Organizational personnel with identifier management responsibilities
organizational personnel with information security responsibilities
Mechanisms supporting and/or implementing identifier management