Hi All,
NIST just published for comment NISTIR 8320C Draft Hardware Enabled Security: 2 Machine Identity Management and Protection
The purpose of this publication is to describe an effective approach for managing machine identities so that they are protected from malware and other security-related vulnerabilities. This publication first explains selected security challenges in creating, managing, and protecting machine identities throughout their lifecycle. It then describes a proof-of-concept implementation, a prototype, that was designed to address those challenges. The publication provides sufficient details about the prototype implementation so that organizations can reproduce it if desired. The publication is intended to be a blueprint or template that can be used by the general security community to validate and utilize the described implementation.
Public comment period: April 20, 2022 - June 6, 2022
Submit comments on this publication to:
[email protected]------------------------------
Michael Roza CPA, CISA, CIA, MBA, Exec MBA
------------------------------