+IA-12(06) Accept Externally-proofed Identities
|
IA-12(06) Accept Externally-proofed Identities
Control
Accept externally-proofed identities at [Assignement: identity assurance level].
Discussion
To limit unnecessary re-proofing of identities, particularly of non-PIV users, organizations accept proofing conducted at a commensurate level of assurance by other agencies or organizations. Proofing is consistent with organizational security policy and the identity assurance level appropriate for the system, application, or information accessed. Accepting externally-proofed identities is a fundamental component of managing federated identities across agencies and organizations.
Assessment Objective
externally proofed identities are accepted [Assignement: identity assurance level].
Assessment Method
Examine
Identification and authentication policy
procedures addressing identity proofing
system security plan
other relevant documents or records
Interview
Organizational personnel with system operations responsibilities
organizational personnel with information security responsibilities
system/network administrators
system developers
organizational personnel with identification and authentication responsibilities
1. Yleiskatsaus
1.1 Viittaukset
1.2 Tunnistetut vaatimukset
1.3 Liittyvät säädökset
2. Tunnistetut vaatimukset
Vaatimukset
| Lähde |
Vaatimus |
3. Liittyvät säädökset
Linkitetyt tehtävät
|