03.06.05 - Authenticator Management

The ia_l_05 control requires organizations to establish and maintain processes for the lifecycle management of authenticators, including creation, distribution, revocation, and disposal of passwords, tokens, and other credentials. It ensures that only authorized individuals can obtain, use, and modify authenticators, and that any compromised or obsolete credentials are promptly deactivated. This helps protect Controlled Unclassified Information by reducing the risk of unauthorized access.