BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

2.6 Issuer Roles and Responsibilities (was: PCI Roles and Responsibilities)

NIST PIV and digital identity SP 800-79-2 against SP 800-79-1
All changes in this version
modified 2 PREPARATION FOR ASSESSMENT AND AUTHORIZATION part of 2

Title changed

Before · SP 800-79-1

PCI Roles and Responsibilities

After · SP 800-79-2

PCIIssuer Roles and Responsibilities

Control changed

Before · SP 800-79-1

FIPS 201-1 Appendix A provides examples of two models that satisfy the requisite PIV control objectives and meet the requirements for issuance of PIV Cards. An organization may select either of the two models, employ a hybrid, or utilize a completely new model. PIV Card issuance roles and their processes are to be selected based on the organization’s structure, its mission, and operating environment. The organization must make sure that a separation of roles has been established and the processes are in compliance with FIPS 201-1.

Roles discussed in FIPS 201-1 pertain to PCI processes and functions, and are included by reference, but not defined in this document. This document identifies only roles and responsibilities of key personnel involved in the accreditation of a PCI 1 . Recognizing that organizations have widely varying missions and structures, there may be some differences in naming conventions for accreditation-related roles and in how the associated responsibilities are allocated among personnel (e.g. one individual may perform multiple roles).

After · SP 800-79-2

FIPS 201-1 Appendix A provides examples of two models that satisfy the requisite PIV control objectivesCard and meet the requirements for issuance of PIV Cards. An organization may select either of the two models, employ a hybrid, or utilize a completely new model.Derived PIV CardCredential issuance roles and their processes are to be selected based on the organization’s structure, its mission, and operating environment. The organization must make sure that a separation of roles has been established and the processes are in compliance with FIPS 201-1201-2.

Roles discussed in FIPS 201-1 pertain to PCI processes and functions, and are included by reference, but not defined in this document. This document identifies only roles and responsibilities of key personnel involved in the accreditationassessment ofand aauthorization PCIof 1an issuer. 10 Recognizing that organizations have widely varying missions and structures, there may be some differences in naming conventions for accreditation-relatedauthorization-related roles and in how the associated responsibilities are allocated among personnel (e.g. one individual may perform multiple roles in certain circumstances).