IA-03.4 ยท Device Attestation

Control Description

Handle device identification and authentication based on attestation by {{ insert: param, ia-03.04_odp }}.

Impact Baselines
Security baselines where this control applies
Not in any baseline
Control Properties
SP800-53-enhancement
organization
Enhancement
Control Statement
The control requirements

Handle device identification and authentication based on attestation by {{ insert: param, ia-03.04_odp }}.

Supplemental Guidance

Device attestation refers to the identification and authentication of a device based on its configuration and known operating state. Device attestation can be determined via a cryptographic hash of the device. If device attestation is the means of identification and authentication, then it is important that patches and updates to the device are handled via a configuration management process such that the patches and updates are done securely and do not disrupt identification and authentication to other devices.

Related NIST Controls
Other NIST 800-53 controls related to this one