NIST PIV and digital identity SP 800-79-1 → SP 800-79-2

Published 2015-07-30
Snapshot taken 2026-10-19 23:49 · sp-800-79 source

+ 2 added: 2.6.9, 2.9.4 − 8 removed: Appendix A, Appendix B, Appendix C, Appendix D, Appendix E, Appendix F, Appendix G, Appendix H ~ 38 revised: 1, 1.1, 1.2, 1.3, 1.4, 1.5, 2, 2.1, 2.10, 2.11…

Why this release

No stated reason was captured with this release. Check the publisher's release notes.

All · 48 1 Introduction · 6 2 PREPARATION FOR ASSESSMENT AND AUTHORIZATION · 27 3 T AXONOMY OF I SSUER C ONTROLS · 4 4 I SSUER C ONTROLS A SSESSMENT & A UTHORIZATION D ECISION P ROCESS · 3 Appendix A REFERENCES · 1 Appendix B GLOSSARY AND ACRONYMS · 1 Appendix C PCI READINESS REVIEW CHECKLIST · 1 Appendix D PCI OPERATIONS PLAN TEMPLATE · 1 Appendix E ASSESSMENT REPORT TEMPLATE · 1 Appendix F SAMPLE TRANSMITTAL AND DECISION LETTERS · 1 Appendix G PCI CONTROLS AND ASSESSMENT PROCEDURES · 1 Appendix H ASSESSMENT AND ACCREDITATION TASKS FOR PIV CARD ISSUERS · 1

Controls added, removed or revised 48

Controls added, removed or revised
Control	Title	Change
1	Introduction	Control text, Title
1.1	Applicability, Intended Audience, and Usage	Control text
1.2	Changes for this Revision	Control text, Title
1.3	Timelines for using the revised Guidelines	Control text
1.4	Key Related NIST Publications	Control text
1.5	Organization of this Special Publication	Control text
2	PREPARATION FOR ASSESSMENT AND AUTHORIZATION	Control text, Title
2.1	Issuer	Control text, Title
2.10	The Use of Risk in the Authorization Decision	Control text, Title
2.11	Authorization Submission Package and Supporting Documentation	Control text, Title
2.2	Issuing Facilities	Control text, Title
2.3	Outsourcing of Issuing Functions	Control text, Title
2.4	Assessment and Authorization	Control text, Title
2.5	Authorization Boundary of the Issuer	Control text, Title
2.6	Issuer Roles and Responsibilities	Control text, Title
2.6.1	Senior Authorizing Official (SAO)	Control text, Title
2.6.2	Designated Authorizing Official (DAO)	Control text, Title
2.6.3	Organization Identity Management Official (OIMO)	Control text, Title
2.6.4	Issuing Facility Manager	Control text, Title
2.6.5	Assessor	Control text
2.6.6	Applicant Representative (AR)	Control text, Title
2.6.7	Privacy Official (PO)	Control text, Title
2.6.8	Role Assignment Policies	Control text, Title
2.6.9	Assessment and Authorization Roles	added
2.7	The Relationship between SP 800-79-2 and SP 800-37-1	Control text, Title
2.8	Preparing for the Assessment of an Issuer	Control text, Title
2.8.1	Issuer Duties	Control text, Title
2.8.2	Assessment Team Duties	Control text
2.9	Authorization Decisions	Control text, Title
2.9.1	Authorization to Operate (ATO)	Control text, Title
2.9.2	Interim Authorization to Operate (IATO)	Control text, Title
2.9.3	Denial of Authorization to Operate (DATO)	Control text, Title
2.9.4	Authorization Impact of Information Systems under NIST SP 800-37-1	added
3	T AXONOMY OF I SSUER C ONTROLS	Title
3.1	Introducing Issuer Controls	Control text, Title
3.2	Implementing Issuer Controls	Control text, Title
3.2.1	Issuer Controls implemented at the Organization or Facility Level	Control text, Title
4	I SSUER C ONTROLS A SSESSMENT & A UTHORIZATION D ECISION P ROCESS	Control text, Title
4.1	Assessment Methods	Control text
4.2	The Issuer Assessment Report	Control text, Title
Appendix A	REFERENCES	removed
Appendix B	GLOSSARY AND ACRONYMS	removed
Appendix C	PCI READINESS REVIEW CHECKLIST	removed
Appendix D	PCI OPERATIONS PLAN TEMPLATE	removed
Appendix E	ASSESSMENT REPORT TEMPLATE	removed
Appendix F	SAMPLE TRANSMITTAL AND DECISION LETTERS	removed
Appendix G	PCI CONTROLS AND ASSESSMENT PROCEDURES	removed
Appendix H	ASSESSMENT AND ACCREDITATION TASKS FOR PIV CARD ISSUERS	removed

Read every requirement in this version · All versions of NIST PIV and digital identity