ComplianceNIST 800-53 enhancement

NIST-SA-4(10) Use of Approved PIV Products

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
SA System and Services Acquisition
Control
SA-4(10)

Control statement

Employ only information technology products on the FIPS 201-approved products list for Personal Identity Verification (PIV) capability implemented within organizational systems.

Discussion

Products on the FIPS 201-approved products list meet NIST requirements for Personal Identity Verification (PIV) of Federal Employees and Contractors. PIV cards are used for multi-factor authentication in systems and organizations.

Related

Enhancement of · Compliance (1)

  • NIST-SA-4 Acquisition Process NIST 800-53 control

Related control · Compliance (3)

  • NIST-IA-2 Identification and Authentication (Organizational Users) NIST 800-53 control
  • NIST-IA-8 Identification and Authentication (Non-organizational Users) NIST 800-53 control
  • NIST-PM-9 Risk Management Strategy NIST 800-53 control