---

id: "IA-05(14)" title: "Managing Content of PKI Trust Stores" family: "IA" family_name: "Identification and Authentication" sort_id: "ia-05.14" priority: "P1" implementation_level: "organization" parent: "IA-05" enhancement: True

---

Statement

For PKI-based authentication, employ an organization-wide methodology for managing the content of PKI trust stores installed across all platforms, including networks, operating systems, browsers, and applications.

Guidance

An organization-wide methodology for managing the content of PKI trust stores helps improve the accuracy and currency of PKI-based authentication credentials across the organization.

Assessment Objective

an organization-wide methodology for managing the content of PKI trust stores is employed across all platforms, including networks, operating systems, browsers, and applications for PKI-based authentication.

Identification and authentication policy

procedures addressing authenticator management

system security plan

organizational methodology for managing content of PKI trust stores across installed all platforms

system design documentation

system configuration settings and associated documentation

enterprise security architecture documentation

enterprise architecture documentation

other relevant documents or records

Organizational personnel with authenticator management responsibilities

organizational personnel with information security responsibilities

system/network administrators

system developers

Mechanisms supporting and/or implementing PKI-based authenticator management capability

mechanisms supporting and/or implementing the PKI trust store capability