The CMS shall have document incident handling procedures that are approved by the 10.14 Appendix head of the organization responsible for operating the CMS. If the CMS is B compromised, all certificates issued to the CMS shall be revoked, if applicable. The damage caused by the CMS compromise shall be assessed and all Subscriber certificates that may have been compromised shall be revoked, and Subscribers shall be notified of such revocation. The CMS shall be re-established. All Trusted Roles who operate a CMS shall be allowed access only when authenticated using a method commensurate with PIV-I Hardware. Applicant: The computer security functions listed below are required for the CMS: 10.15 Appendix authenticate the identity of users before permitting access to the system or B applications; manage privileges of users to limit users to their assigned roles; generate and archive audit records for all transactions; (see Section 5.4) enforce domain integrity boundaries for security critical processes; and support recovery from key or system failure. Applicant: Additional Applicant Information Applicant:
10.14 Appendix B The CMS shall have document incident handling procedures that are approved by the head of the organization responsible for operating the CMS. If the CMS is compromised, all certificates issued to the CMS shall be revoked, if applicable. The damage caused by the CMS compromise shall be assessed and all Subscriber certificates that may have been compromised shall be revoked, and Subscribers shall be notified of such revocation. The CMS shall be re-established. All Trusted Roles who operate a CMS shall be allowed access only when authenticated using a method commensurate with PIV-I Hardware. Applicant: 10.15 Appendix B The computer security functions listed below are required for the CMS: authenticate the identity of users before permitting access to the system or applications; manage privileges of users to limit users to their assigned roles; generate and archive audit records for all transactions; (see Section 5.4) enforce domain integrity boundaries for security critical processes; and support recovery from key or system failure. Applicant: Additional Applicant Information Applicant: