Compliancemanzill.com
NIST 800-53 rev.5

NIST 800-53 rev.5/System and Communications Protection/812 of 1011

SC-17Public Key Infrastructure Certificates

Control family: System and Communications Protection

Control description

a. Issue public key certificates under an [Assignment: organization-defined certificate policy] or obtain public key certificates from an approved service provider; and

b. Include only approved trust anchors in trust stores or certificate stores managed by the organization.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.