Skip to content

Non-Repudiation

What is Non-Repudiation?

A security property that ensures a party cannot deny having performed an action, such as sending a message or authorising a transaction. Non-repudiation is typically achieved through digital signatures and audit trails.

Information Security

Terms that appear alongside non-repudiation

Each of these is named in at least one of the same controls as non-repudiation. The number is how many controls name both.

Frameworks that govern non-repudiation

ISO 27001:2022View framework →PCI DSS v4.0View framework →

What the standards actually require on non-repudiation

Requirements naming non-repudiation across 6 standards, quoted from the control text.

ITU-T X.805 - Security Architecture for End-to-End Communications8 controls

Security Dimension 3 Non-Repudiation per X.805 Clause 6.3: Non-repudiation provides means for preventing an individual or entity from denying having performed a particular action related to data by making available proof of various network-related actions (e.g...

X805-Dim3-Non-Repudiation-Proof-Origin-Delivery-Sender-Receiver-Denial-Prevention · ITU-T X.805 Security Dimension 3 - Non-Repudiation + Proof of Origin + Proof of Delivery + Sender + Receiver Denial Prevention + Digital Signatures + Timestamping + Audit Logs + Forensic Evidence + Court-Admissible Records →
BSI IT-Grundschutz1 control

Accountability and non-repudiation. Control from BSI IT-Grundschutz framework, domain: BSI IT-Grundschutz: Audit & Accountability.

BSI-32 · Accountability and non-repudiation →
Belgium CyberFundamentals1 control

Accountability and non-repudiation. Implements CyFun PR.PT-1 / PR.AC-1: actions are attributable to individual users to provide accountability and non-repudiation.

BE-CF-32 · Accountability and non-repudiation →
NIST SP 800-161 Rev 11 control

Establishes that actions taken by suppliers and integrators, and the provenance claims they make, cannot later be repudiated.

161R1-AU-10 · Non-repudiation →
NIST SP 800-53 Rev 51 control

Non-repudiation. Provide irrefutable evidence that an individual (or process acting on behalf of an individual) has performed [organization-defined]

NIST800-AU-10 · Non-repudiation. Provide irrefutable evidence that an individual (or process acting on behalf of an individual) has performed [organization-defined] →
GAMP 5 - Good Automated Manufacturing Practice1 control

GAMP 5 DATA INTEGRITY + 21 CFR PART 11 + EU ANNEX 11 alignment. ALCOA+ PRINCIPLES (FDA + EMA + MHRA Data Integrity Guidance): ATTRIBUTABLE + LEGIBLE + CONTEMPORANEOUS + ORIGINAL + ACCURATE + COMPLETE + CONSISTENT + ENDURING + AVAILABLE.

GAMP5-DataIntegrity-Part11-Annex11 · Data Integrity (ALCOA+), 21 CFR Part 11 + EU Annex 11 + Electronic Records →

Questions people ask about non-repudiation

What is Non-Repudiation?
A security property that ensures a party cannot deny having performed an action, such as sending a message or authorising a transaction. Non-repudiation is typically achieved through digital signatures and audit trails.
Why is Non-Repudiation important for compliance?
Non-Repudiation is a key concept in Information Security. Understanding non-repudiation helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Non-Repudiation?
Non-Repudiation appears in the requirement text of ITU-T X.805 - Security Architecture for End-to-End Communications, BSI IT-Grundschutz, Belgium CyberFundamentals, NIST SP 800-161 Rev 1, NIST SP 800-53 Rev 5. Across these standards we have identified 13 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Non-Repudiation?
Explore our compliance framework pages to see how non-repudiation applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Non-Repudiation applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.