ComplianceNIST 800-53 enhancement
NIST-SC-23(5) Allowed Certificate Authorities
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- SC System and Communications Protection
- Control
- SC-23(5)
Control statement
Only allow the use of [Assignment: certificated authorities] for verification of the establishment of protected sessions.
Discussion
Reliance on certificate authorities for the establishment of secure sessions includes the use of Transport Layer Security (TLS) certificates. These certificates, after verification by their respective certificate authorities, facilitate the establishment of protected sessions between web clients and web servers.
Related
Enhancement of · Compliance (1)
- NIST-SC-23 Session Authenticity NIST 800-53 control
Related control · Compliance (2)
- NIST-SC-12 Cryptographic Key Establishment and Management NIST 800-53 control
- NIST-SC-13 Cryptographic Protection NIST 800-53 control