2 templates mapped to NIST SP 800-63B.
Enterprise-grade machine identity management policy addressing the 82:1 machine-to-human identity ratio in modern enterprises. Covers service account governance, API key management, certificate lifecycle automation, secrets management, SSH keys, cloud workload identity, Kubernetes service accounts, IoT device identity, and SPIFFE/SPIRE implementation. Includes controls for orphaned accounts, excessive privileges, and compliance with NIST SP 800-63B, ISO 27001:2022, and PCI DSS 4.0.
NIST 800-53 Rev 5 identity and authentication controls with multi-factor authentication requirements