Assessment Objective
Determine if:
- IA-12(05) a [Selection: registration code; notice of proofing] is delivered through an out-of-band channel to verify the user’s address (physical or digital) of record.
Assessment Methods
Examine
- Identification and authentication policy
- procedures addressing identity proofing
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with system operations responsibilities
- organizational personnel with information security responsibilities
- system/network administrators
- system developers
- organizational personnel with identification and authentication responsibilities
Test
- Mechanisms supporting and/or implementing identification and authentication capabilities
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | IA-12(05) [H] Address Confirmation |