BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

2.6.3 Organization Identity Management Official (OIMO) (was: Organization Identity Management Official)

NIST PIV and digital identity SP 800-79-2 against SP 800-79-1
All changes in this version
modified 2 PREPARATION FOR ASSESSMENT AND AUTHORIZATION part of 2.6

Title changed

Before · SP 800-79-1

Organization Identity Management Official

After · SP 800-79-2

Organization Identity Management Official (OIMO)

Control changed

Before · SP 800-79-1

The Organization Identity Management Official (OIMO) is responsible for implementing policies of the organization, assuring that all specified procedures of the PCI are being performed reliably, and providing guidance and assistance to the PCI Facilities. The OIMO implements and manages the PCI operations plan; ensures that all PCI roles are filled with capable, trustworthy, knowledgeable, and trained staff; makes certain that all PCI services, equipment, and processes meet FIPS 201-1 requirements; monitors and coordinates activities with PCI Facility Manager(s); and supports the accreditation process. The OIMO cannot fulfill the role of the DAA.

After · SP 800-79-2

The Organization Identity Management Official (OIMO) is responsible for implementing policies of the organization, assuring that all specifiedPIV proceduresprocesses of the PCIissuer are being performed reliably, and providing guidance and assistance to the PCIissuing Facilitiesfacilities. The OIMO implements and manages the PCI operations plan; ensures that all PCI roles are filled with capable, trustworthy, knowledgeable, and trained staff; makes certain that all PCI services, equipment, and processes meet FIPS 201-1201-2 requirements; monitors and coordinates activities with PCIIssuing Facility Manager(s); and supports the accreditationauthorization process.

10 TheOrganizations OIMOmay cannotdefine fulfillother thesignificant roleroles of(e.g., PIV System liaisons, operations managers) to support the DAAauthorization process.