BaselineWatch
Desk

2 PREPARATION FOR ASSESSMENT AND AUTHORIZATION (was: THE FUNDAMENTALS)

NIST PIV and digital identity SP 800-79-2 against SP 800-79-1
All changes in this version
modified 2 PREPARATION FOR ASSESSMENT AND AUTHORIZATION

Title changed

Before · SP 800-79-1

THE FUNDAMENTALS

After · SP 800-79-2

THEPREPARATION FUNDAMENTALSFOR ASSESSMENT AND AUTHORIZATION

Control changed

Before · SP 800-79-1

This chapter presents the fundamentals of Personal Identity Verification (PIV) Card Issuer (PCI) accreditation including: (i) definitions of a PCI and a PCI Facility; (ii) outsourcing PCI services or functions; (iii) the differences between assessment and accreditation; (iv) accreditation boundaries of a PCI; (v) roles and responsibilities; (vi) the relationship between accreditation under Special Publication (SP) 800-37 and SP 800-79-1; (vii) preparing for the assessment; (viii) types of accreditation decisions; (ix) use of risk in the accreditation decision; and (x) the contents of the accreditation package.

After · SP 800-79-2

This chapter presents the fundamentals of Personalan Identityauthorization Verificationof (a PIV) Card Issuer (PCI) accreditationand includinga Derived PIV Credential Issuer (DPCI). It includes: (i) definitions of aan PCIissuer and a PCIissuing Facilityfacility; (ii) outsourcing PCIissuer services or functions; (iii) the differences between an assessment and accreditationauthorization; (iv) accreditationauthorization boundaries of aan PCIissuer; (v) roles and responsibilities; (vi) the relationship between accreditationauthorization under Special Publication ([SP) 800-37800-37-1] and SP 800-79-1800-79-2; (vii) preparing for the assessment; (viii) types of accreditationauthorization decisions; (ixxi) use of risk in the accreditationauthorization decision; and (x) the contents of the accreditationauthorization package.