top of page
A02
Agent Identity & Authorisation
Agent credentials are short-lived and issued at runtime rather than statically configured.
WHAT IT ADDRESSES
Static credentials persist after compromise and outlive the task.
VERIFICATION METHOD
Inspect credential store; confirm maximum time-to-live against policy.
Five Eyes; OWASP T&M
bottom of page