Skip to main content

💼 SC-23 SESSION AUTHENTICITY

Description​

The information system protects the authenticity of communications sessions.

Similar​

  • Internal
    • ID: dec-c-2be8a736

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 NIST CSF v1.1 → 💼 PR.PT-4: Communications and control networks are protected1022

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
💼 SC-23 (1) INVALIDATE SESSION IDENTIFIERS AT LOGOUT
💼 SC-23 (2) USER-INITIATED LOGOUTS _ MESSAGE DISPLAYS
💼 SC-23 (4) UNIQUE SESSION IDENTIFIERS WITH RANDOMIZATION
💼 SC-23 (5) ALLOWED CERTIFICATE AUTHORITIES