BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

1.5 Organization of this Special Publication

NIST PIV and digital identity SP 800-79-2 against SP 800-79-1
All changes in this version
modified 1 Introduction part of 1

Title

Organization of this Special Publication

Control changed

Before · SP 800-79-1

The remainder of this publication is organized as follows:

• Chapter 2 provides background information needed to understand the PCI accreditation methodology, as well as the inputs and outputs involved in the assessment and accreditation processes. These include: (i) Definition of the target accreditation entities (PCI, PCI facilities, PCI boundaries); (ii) the relationship between accreditation under SP 800-37 and accreditation under SP 800-79-1; (iii) preparatory tasks of accreditation including assignment of roles and responsibilities; (iv) three alternative accreditation decisions; (v) acceptance of risk in the accreditation decision; and (vi) the contents of the accreditation package.

• Chapter 3 describes the building blocks of the PCI accreditation methodology, including Accreditation Topics, Accreditation Focus Areas, and the control requirements within each area called PCI controls.

• Chapter 4 provides a detailed description of the assessment methods for the PCI controls whose outcomes form the basis for the accreditation decision.

• Chapter 5 describes the 4 phases of the accreditation methodology and the tasks involved in each phase.

• Appendices include— (i) references; (ii) glossary and acronyms; (iii) PCI readiness review checklist; (iv) PCI operations plan template; (v) assessment report template; (vi) sample accreditation transmittal and decision letters; (vii) PCI controls and assessment procedures; and (viii) summary of tasks and sub-tasks.

After · SP 800-79-2

The remainder of this publication is organized as follows:

• Chapter 2 provides background information needed to understand theissuer PCIassessment accreditationand authorization methodology, as well as the inputs and outputs involved in the assessment andof accreditationthe issuance processes. These include: (i) Definitiondefinition of the target accreditation entities (PCIissuer, PCIissuer facilities, PCIissuer boundaries); (ii) the relationship between accreditationauthorization under [SP 800-37800- 37-1] and accreditationauthorization under SP 800-79-1800-79-2; (iii) preparatory tasks for the assessment of accreditationan issuer organization including assignment of roles and responsibilities; (iv) threetwo alternative accreditationauthorization decisions; (v) acceptance of risk in the accreditationauthorization decision; and (vi) the contents of the accreditationauthorization package.

• Chapter 3 describes the building blocks of the PCIissuer accreditationassessment and authorization methodology, including AccreditationAuthorization Topics, AccreditationAuthorization Focus Areas, and the control requirements (issuer controls) within each area called PCI controls.

• Chapter 4 provides a detailed description of the assessment methods for the PCIissuer controls whose outcomes form the basis for the accreditationauthorization decision.

• Chapter 5 describes the 4 phases of the accreditationauthorization methodologyprocess and the tasks involved in each phase.

• Appendices include— (i A ) references; (ii B ) glossary and acronyms; (iii C ) PCIissuer readiness review checklist; (iv D ) PCIissuer operations plan templatetemplates; (v E ) assessment report template; (vi F ) sample accreditationauthorization transmittal and decision letters; (vii G ) PCIissuer controls and assessment procedures; and (viii H ) summary of tasks and sub-tasks.