2 PREPARATION FOR ASSESSMENT AND AUTHORIZATION (was: THE FUNDAMENTALS)
All changes in this version
Title changed
Before · SP 800-79-1
THE FUNDAMENTALS
After · SP 800-79-2
THEPREPARATION FUNDAMENTALSFOR ASSESSMENT AND AUTHORIZATION
Control changed
Before · SP 800-79-1
This chapter presents the fundamentals of Personal Identity Verification (PIV) Card Issuer (PCI) accreditation including: (i) definitions of a PCI and a PCI Facility; (ii) outsourcing PCI services or functions; (iii) the differences between assessment and accreditation; (iv) accreditation boundaries of a PCI; (v) roles and responsibilities; (vi) the relationship between accreditation under Special Publication (SP) 800-37 and SP 800-79-1; (vii) preparing for the assessment; (viii) types of accreditation decisions; (ix) use of risk in the accreditation decision; and (x) the contents of the accreditation package.
After · SP 800-79-2
This chapter presents the fundamentals of Personalan Identityauthorization Verificationof (a PIV) Card Issuer (PCI) accreditationand includinga Derived PIV Credential Issuer (DPCI). It includes: (i) definitions of aan PCIissuer and a PCIissuing Facilityfacility; (ii) outsourcing PCIissuer services or functions; (iii) the differences between an assessment and accreditationauthorization; (iv) accreditationauthorization boundaries of aan PCIissuer; (v) roles and responsibilities; (vi) the relationship between accreditationauthorization under Special Publication ([SP) 800-37800-37-1] and SP 800-79-1800-79-2; (vii) preparing for the assessment; (viii) types of accreditationauthorization decisions; (ixxi) use of risk in the accreditationauthorization decision; and (x) the contents of the accreditationauthorization package.