IA-1: Policy and Procedures

personnel or roles to whom the identification and authentication policy is to be disseminated are defined;

personnel or roles to whom the identification and authentication procedures are to be disseminated is/are defined;

an official to manage the identification and authentication policy and procedures is defined;

the frequency at which the current identification and authentication policy is reviewed and updated is defined;

events that would require the current identification and authentication policy to be reviewed and updated are defined;

the frequency at which the current identification and authentication procedures are reviewed and updated is defined;

events that would require identification and authentication procedures to be reviewed and updated are defined;