IDEF Credential Reproduction, v1.0
Specifies requirements in accordance with Identity Ecosystem Framework (IDEF) requirement SECURE-3: CREDENTIAL REPRODUCTION.
Assessment Step
1
Credential Reproduction (CredentialReproduction)
Does the entity implement industry-accepted processes to protect against the unauthorized disclosure and reproduction of the credentials and/or tokens that it issues and/or manages?
Artifact
A1
Provide evidence (e.g. organizational policies, procedures, compliance/assessment reports, etc.) and supporting notes as appropriate to support the assessor's response to this assessment step.
|
Conformance Criteria (1)
Credential Reproduction
Entities that issue or manage credentials and tokens MUST implement industry-accepted processes to protect against their unauthorized disclosure and reproduction.
Citation
IDEF
Page 26
|