ComplianceNIST 800-53 control

NIST-AU-10 Non-repudiation

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
AU Audit and Accountability
Control
AU-10

Control statement

Provide irrefutable evidence that an individual (or process acting on behalf of an individual) has performed [Assignment: actions].

Discussion

Types of individual actions covered by non-repudiation include creating information, sending and receiving messages, and approving information. Non-repudiation protects against claims by authors of not having authored certain documents, senders of not having transmitted messages, receivers of not having received messages, and signatories of not having signed documents. Non-repudiation services can be used to determine if information originated from an individual or if an individual took specific actions (e.g., sending an email, signing a contract, approving a procurement request, or receiving specific information). Organizations obtain non-repudiation services by employing various techniques or mechanisms, including digital signatures and digital message receipts.

Related

Related control · Compliance (9)

  • NIST-AU-9 Protection of Audit Information NIST 800-53 control
  • NIST-PM-12 Insider Threat Program NIST 800-53 control
  • NIST-SA-8 Security and Privacy Engineering Principles NIST 800-53 control
  • NIST-SC-12 Cryptographic Key Establishment and Management NIST 800-53 control
  • NIST-SC-13 Cryptographic Protection NIST 800-53 control
  • NIST-SC-16 Transmission of Security and Privacy Attributes NIST 800-53 control
  • NIST-SC-17 Public Key Infrastructure Certificates NIST 800-53 control
  • NIST-SC-23 Session Authenticity NIST 800-53 control
  • NIST-SC-8 Transmission Confidentiality and Integrity NIST 800-53 control

Referenced by Compliance · enhancement of (4)

  • NIST-AU-10(1) Association of Identities NIST 800-53 enhancement
  • NIST-AU-10(2) Validate Binding of Information Producer Identity NIST 800-53 enhancement
  • NIST-AU-10(3) Chain of Custody NIST 800-53 enhancement
  • NIST-AU-10(4) Validate Binding of Information Reviewer Identity NIST 800-53 enhancement

Referenced by Compliance · has member (1)

  • NIST-AU Audit and Accountability NIST 800-53 family

Referenced by Compliance · related control (14)

  • NIST-AC-16 Security and Privacy Attributes NIST 800-53 control
  • NIST-AC-24(1) Transmit Access Authorization Information NIST 800-53 enhancement
  • NIST-AC-3(10) Audited Override of Access Control Mechanisms NIST 800-53 enhancement
  • NIST-AC-4 Information Flow Enforcement NIST 800-53 control
  • NIST-AU-9(3) Cryptographic Protection NIST 800-53 enhancement
  • NIST-PM-12 Insider Threat Program NIST 800-53 control
  • NIST-SA-8(22) Accountability and Traceability NIST 800-53 enhancement
  • NIST-SC-12 Cryptographic Key Establishment and Management NIST 800-53 control
  • NIST-SC-13 Cryptographic Protection NIST 800-53 control
  • NIST-SC-16(1) Integrity Verification NIST 800-53 enhancement
  • NIST-SC-17 Public Key Infrastructure Certificates NIST 800-53 control
  • NIST-SC-20 Secure Name/Address Resolution Service (Authoritative Source) NIST 800-53 control
  • NIST-SC-23 Session Authenticity NIST 800-53 control
  • NIST-SC-8 Transmission Confidentiality and Integrity NIST 800-53 control