💼 IA-5(7) No Embedded Unencrypted Static Authenticators (M)(H)
- Contextual name: 💼 IA-5(7) No Embedded Unencrypted Static Authenticators (M)(H)
- ID:
/frameworks/fedramp-high-security-controls/ia/05/07 - Located in: 💼 IA-5 Authenticator Management (L)(M)(H)
Description
Ensure that unencrypted static authenticators are not embedded in applications or other forms of static storage.
IA-5 (7) Additional FedRAMP Requirements and Guidance:
Guidance: In this context, prohibited static storage refers to any storage where unencrypted authenticators, such as passwords, persist beyond the time required to complete the access process.
Similar
- Sections
/frameworks/nist-sp-800-53-r5/ia/05/07
- Internal
- ID:
dec-c-eff1651d
- ID:
Similar Sections (Take Policies From)
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|---|---|---|---|
| 💼 NIST SP 800-53 Revision 5 → 💼 IA-5(7) Authenticator Management _ No Embedded Unencrypted Static Authenticators |
Similar Sections (Give Policies To)
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|---|---|---|---|
| 💼 FedRAMP Moderate Security Controls → 💼 IA-5(7) No Embedded Unencrypted Static Authenticators (M)(H) |
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|