Customer
Responsibilities | Implementation Status | Control
Organization |
Implemented | Service Provider System Specific | Configured by Customer (Customer System
Specific) | Shared (Service Provider and Customer
Responsibility | Inherited from Pre-existing
Authorization |
AC-2: Account
Management |
AC-02 (a-g),
(i-k) | x | x | x | x | x |
AC-02 (05) | x | x | x | x | x |
CA-03: System
Interconnections |
CA-03 (03) | x | x | x | x | |
IA -02/08: Identification &
Authentication: Org & Non-org Users |
IA-02 | x | x | x | x | |
IA-02 (02) | x | x | x | x | x |
IA-02 (12) | x | x | x | x | |
IA-08 | x | x | x | x | |
IA-08 (01-04) | x | x | x | x | |
IR-9: Information Spillage
Response |
IR-09 (a-f) | x | x | x | x | |
SA-04: Acquisition Process |
SA-04 (10) | x | x | x | x | |
SC-08: Transmission Confidentiality
& Integrity |
SC-08 | x | x | x | x | x |
SC-08 (01) | x | x | x | x | x |