BaselineWatch
Desk

2.6.4 Issuing Facility Manager (was: PCI Facility Manager)

NIST PIV and digital identity SP 800-79-2 against SP 800-79-1
All changes in this version
modified 2 PREPARATION FOR ASSESSMENT AND AUTHORIZATION part of 2.6

Title changed

Before · SP 800-79-1

PCI Facility Manager

After · SP 800-79-2

PCIIssuing Facility Manager

Control changed

Before · SP 800-79-1

A PCI Facility (PCIF) Manager manages the day-to-day operations of a PCI facility. A PCIF Manager is responsible for implementing all operating procedures for those functions that have been designated for that facility. The PCIF Manager must ensure that all PIV processes adhere to the requirements of FIPS 201-1, and that all PIV services performed at the PCIF are carried out

1 Organizations may define other significant roles (e.g., PIV System liaisons, operations managers) to support the PCI accreditation process. in a consistent and reliable manner in accordance with the organization’s policies and procedures and the OIMO’s direction. In some cases (e.g. small organizations), the OIMO can fulfill the role of the PCIF Manager.

After · SP 800-79-2

AAn PCIIssuing Facility (PCIF) Manager manages the day-to-day operations of aan PCIissuing facility. AThe PCIFIssuing Facility Manager is responsible for implementing all operating procedures for those functions that have been designated for that facility by the issuer. The PCIF Manager must ensure that all PIV processes adhere to the requirements of FIPS 201-1201-2, and that all PIV services performed at the PCIFissuing facility are carried out

1
Organizations may define other significant roles (e.g., PIV System liaisons, operations managers) to support the PCI accreditation process. in a consistent and reliable manner in accordance with the organization’s policies and procedures and the OIMO’s direction. In some cases (e.g. small organizations), the OIMO canmay fulfill the role of the PCIFIssuing Facility Manager.