|
controlSC-17

Public Key Infrastructure Certificates (SC-17)

Issue public key certificates under an [organization-defined] or obtain public key certificates from an approved service provider; and Include only approved trust anchors in trust stores or certificate stores managed by the organization.

Security Baselines

MODERATEHIGHLOW
communicationsencryptionboundary-protectionnetwork

Why These Connect

Maps To1

These are equivalent or closely aligned requirements in other frameworks.

Baselined In2

This control is included in the linked security baseline (LOW, MODERATE, or HIGH).

Supports5

These related controls work together — a change to one may affect the others.

Cross-Framework Mappings(1)

ISO 27001ISO/IEC 27001:20221 mappingFinal
NIST OLIR informative reference — SP 800-53 Rev 5 to ISO/IEC 27001:2022