credential

{
  "id": "MLC-T-CYB-001005",
  "term": "credential",
  "field": "Cybersecurity",
  "definition": "1. Evidence attesting to one’s right to credit or authority. In this Standard, it is the PIV Card or derived PIV credential associated with an individual that authoritatively binds an identity (and, optionally, additional attributes) to that individual.\n\n2. An object or data structure that authoritatively binds an identity - via an identifier or identifiers - and (optionally) additional attributes, to at least one authenticator possessed and controlled by a subscriber.\n\n3. An object or data structure that authoritatively binds an identity (and optionally, additional attributes) to a card or token possessed and controlled by a cardholder or subscriber.\n\n4. Evidence attesting to one’s right to credit or authority. In this standard, it is the PIV Card and data elements associated with an individual that authoritatively bind an identity (and, optionally, additional attributes) to that individual.\n\n5. An object or data structure that authoritatively binds an identity - via an identifier or identifiers-and (optionally) additional attributes to at least one authenticator possessed and controlled by a subscriber While common usage often assumes that the subscriber maintains the credential, these guidelines also use the term to refer to electronic records maintained by the Credential Service Providers that establish binding between the subscriber’s authenticator(s) and identity.\n\n6. An object or data structure that authoritatively binds an identity - via an identifier or identifiers-and (optionally) additional attributes to at least one authenticator possessed and controlled by a subscriber While common usage often assumes that the subscriber maintains the credential, these guidelines also use the term to refer to electronic records maintained by the Credential Service Providers that establish binding between the subscriber’s authenticator(s) and identity\n\n7. An object or data structure that authoritatively binds an identity, via an identifier or identifiers, and (optionally) additional attributes, to at least one authenticator possessed and controlled by a subscriber.\n\n8. An object or data structure that authoritatively binds an identity - via an identifier - and (optionally) additional attributes to at least one authenticator that is possessed and controlled by a subscriber. A credential is issued, stored, and maintained by the CSP. Copies of information from the credential can be possessed by the subscriber, typically in the form of one or more digital certificates that are often contained in an authenticator along with their associated private keys.\n\n9. An object or data structure that authoritatively binds an identity (and optionally, additional attributes) to an authenticator possessed and controlled by a subscriber.\n\n10. A set of attributes that uniquely identifies a system entity such as a person, an organization, a service, or a device.",
  "references": [
    "FIPS 201-3",
    "CNSSI 4009-2022",
    "NIST SP 800-79-2",
    "NIST SP 1800-12b",
    "NIST SP 1800-17b",
    "NIST SP 1800-17c",
    "NIST SP 800-53 Rev. 5",
    "NIST SP 800-63-4",
    "NISTIR 8149",
    "NISTIR 7497",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/credential/"
}