Skip to main content

πŸ’Ό SC-23 SESSION AUTHENTICITY

Description​

The information system protects the authenticity of communications sessions.

Similar​

  • Internal
    • ID: dec-c-2be8a736

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό NIST CSF v1.1 β†’ πŸ’Ό PR.PT-4: Communications and control networks are protected713

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό SC-23 (1) INVALIDATE SESSION IDENTIFIERS AT LOGOUT
πŸ’Ό SC-23 (2) USER-INITIATED LOGOUTS _ MESSAGE DISPLAYS
πŸ’Ό SC-23 (4) UNIQUE SESSION IDENTIFIERS WITH RANDOMIZATION
πŸ’Ό SC-23 (5) ALLOWED CERTIFICATE AUTHORITIES