Overview

Security Requirements for 03.05.05 Identifier Reuse

Identifiers are provided for users, processes acting on behalf of users, or devices (03.05.01). Preventing reuse of identifiers implies preventing the assignment of previously used individual, group, role, or device identifiers to different individuals, groups, roles, or devices.

Evidence

  1. 03.05.05.a

    A period within which identifiers cannot be reused is defined

  1. 03.05.05.b

    Reuse of identifiers is prevented within the defined period