Skip to content

Directory Service

What is Directory Service?

A centralized database that stores, organizes, and provides access to information about network resources and users for authentication and authorization.

Information Security

Frameworks that govern directory service

ISO 27001:2022View framework →NIST SP 800-53 Rev 5View framework →

What the standards actually require on directory service

Requirements naming directory service across 4 standards, quoted from the control text.

CIS Controls v82 controls

Centralize access control for all enterprise assets through a directory service or SSO provider, where supported.

CIS-6.7 · Centralize Access Control →
Australian Information Security Manual1 control

IP phones used in public areas do not have the ability to access data networks, voicemail and directory services.

ISM-0558 · IP phones used in public areas do not have the ability to access data networks, voicemail →
ITU-T X.805 - Security Architecture for End-to-End Communications1 control

Security Layer 3 Applications per X.805 Clause 7.3: The Applications Security Layer addresses requirements of network-based applications accessed by service provider customers.

X805-Layer3-Applications-Security-Email-Web-Directory-File-Transfer-E-Commerce-Video · ITU-T X.805 Security Layer 3 - Applications Security + Email + Web + Directory + File Transfer + E-Commerce + Video Conferencing + IM + Office Collaboration + SaaS + B2B EDI + Mobile Apps + APIs →
NIS2 Directive1 control

This point pulls together the authentication and communications controls the Directive names explicitly. Multi-factor authentication, or continuous authentication solutions in its place, is expected where appropriate, and the interesting question is always cov...

nis2-directive::Art.21.2.j · Multi-factor or continuous authentication, secured communications and secured emergency communications →

Questions people ask about directory service

What is Directory Service?
A centralized database that stores, organizes, and provides access to information about network resources and users for authentication and authorization.
Why is Directory Service important for compliance?
Directory Service is a key concept in Information Security. Understanding directory service helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Directory Service?
Directory Service appears in the requirement text of CIS Controls v8, Australian Information Security Manual, ITU-T X.805 - Security Architecture for End-to-End Communications, NIS2 Directive. Across these standards we have identified 5 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Directory Service?
Explore our compliance framework pages to see how directory service applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Directory Service applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.