of devices. The list of devices and/or device types is approved and accepted by the JAB.] IA-4d Control Summary Information Responsible Role: Parameter: Implementation Status all that apply): Implemented Partially implemented Planned Alternative implementation - equivalence (explain below) Configured by customer Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information System Name>, <Date of PA> IA-4d What is the solution and how is it implemented? IA-5g Authenticator Management – The organization manages information system authenticators for and devices by: … g. Changing/refreshing authenticators [Assignment: organization-defined time period by authenticator type] DoD parameter: [sixty days for passwords; 3 years for CAC/PKI certificate; 3 years for biometrics if applicable.] FedRAMP baseline parameter: [sixty days] IA-5g Control Summary Information Responsible Role: Parameter:
of devices. The list of devices and/or device types is approved and accepted by the JAB.] IA-4d Control Summary Information Responsible Role: Parameter: Implementation Status all that apply): Implemented Partially implemented Planned Alternative implementation - equivalence (explain below) Configured by customer Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information System Name>, <Date of PA> IA-4d What is the solution and how is it implemented? IA-5g – Authenticator Management The organization manages information system authenticators for and devices by: … g. Changing/refreshing authenticators [Assignment: organization-defined time period by authenticator type] DoD parameter: [sixty days for passwords; 3 years for CAC/PKI certificate; 3 years for biometrics if applicable.] FedRAMP baseline parameter: [sixty days] IA-5g Control Summary Information Responsible Role: Parameter:
U_CSM_level_4_iaas_template.docx