ComplianceNIST 800-53 enhancement

NIST-IA-12(6) Accept Externally-proofed Identities

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
IA Identification and Authentication
Control
IA-12(6)

Control statement

Accept externally-proofed identities at [Assignment: identity assurance level].

Discussion

To limit unnecessary re-proofing of identities, particularly of non-PIV users, organizations accept proofing conducted at a commensurate level of assurance by other agencies or organizations. Proofing is consistent with organizational security policy and the identity assurance level appropriate for the system, application, or information accessed. Accepting externally-proofed identities is a fundamental component of managing federated identities across agencies and organizations.

Related

Enhancement of · Compliance (1)

  • NIST-IA-12 Identity Proofing NIST 800-53 control

Related control · Compliance (4)

  • NIST-IA-3 Device Identification and Authentication NIST 800-53 control
  • NIST-IA-4 Identifier Management NIST 800-53 control
  • NIST-IA-5 Authenticator Management NIST 800-53 control
  • NIST-IA-8 Identification and Authentication (Non-organizational Users) NIST 800-53 control