Add requirement to review exemptions to smart card login.

Open akegerreis opened this issue 2 years ago • 2 comments

If a site is using smart card login but is also allowing unmapped users, the exemption list should be documented with the ISSM.

Dec 22 '23 19:12 akegerreis

@akegerreis do you have a suggestion on how this should appear in the project?

A note in supplemental where unmapped users is talked about? A separate rule?

Mar 25 '24 15:03 robertgendler

@robertgendler we have this slated to go into the supplemental for our April release of the STIG.

Mar 25 '24 16:03 akegerreis