← ISO 27001 Annex A in plain English

A.5.17 A.5

Organizational / A.5.17

Issuing and protecting authentication credentials

Think of it likeNot writing the alarm code on a sticky note by the panel.

In plain English

The family issues the things that prove who someone is carefully, and protects them, because a shared or exposed code protects nobody.

Related CSF and CIS controls (unofficial mapping)