03.05.05 Identifier Management

This policy establishes procedures for the secure management of identifiers (e.g., usernames, employee IDs, device IDs) assigned to individuals, groups, roles, services, and devices within the organization to ensure confidentiality, integrity, and availability of controlled unclassified information (CUI).

• A.03.05.05.ODP[01]: the time period for preventing the reuse of identifiers is defined.
• A.03.05.05.ODP[02]: characteristics used to identify individual status are defined.
• A.03.05.05.a: authorization is received from organizational personnel or roles to assign an individual, group, role, service, or device identifier.
• A.03.05.05.b[01]: an identifier that identifies an individual, group, role, service, or device is selected.
• A.03.05.05.b[02]: an identifier that identifies an individual, group, role, service, or device is assigned.
• A.03.05.05.c: the reuse of identifiers for <A.03.05.05.ODP[01]: time period> is prevented.
• A.03.05.05.d: individual identifiers are managed by uniquely identifying each individual as <A.03.05.05.ODP[02]: characteristic>.