iac-05-identification&authenticationforthirdpartysystems&services.md

SCF - IAC-05 - Identification & Authentication for Third Party Systems & Services

Mechanisms exist to identify and authenticate third-party systems and services.

Mapped framework controls

ISO 27002

• A.5.16

SOC 2

• CC6.1

Control questions

Does the organization identify and authenticate third-party systems and services?