An ISCM capability that ensures that people have the credentials and authentication methods necessary (and only those necessary) to perform their duties, while limiting access to that which is necessary.
NISTIR 8011 Vol. 1
See Capability, Credentials and Authentication Management.
NISTIR 8011 Vol. 1 under Manage Credentials and Authentication