BaselineWatch
Desk

2.8 Preparing for the Assessment of an Issuer (was: Preparing for a PCI’s Assessment)

NIST PIV and digital identity SP 800-79-2 against SP 800-79-1
All changes in this version
modified 2 PREPARATION FOR ASSESSMENT AND AUTHORIZATION part of 2

Title changed

Before · SP 800-79-1

Preparing for a PCI’s Assessment

After · SP 800-79-2

Preparing for a PCI’sthe Assessment of an Issuer

Control changed

Before · SP 800-79-1

To facilitate an assessment of a PCI in a timely, efficient, and thorough manner, it is essential that all members of the Assessment team and staff of the PCI understand their specific roles and responsibilities, and participate as needed. The PCI, its facility personnel, and the team responsible for performing the assessment must cooperate and collaborate in a joint manner to ensure the success of the assessment. Specific responsibilities of the assessment team are listed below. For further information, including considerations that an organization may want to take into account when outsourcing assessments, refer to NIST Interagency Report (IR) 7328, Security Assessment Provider Requirements and Customer Responsibilities: Building a Security Assessment Credentialing Program for Federal Information Systems.

After · SP 800-79-2

To facilitate an assessment of aan PCIissuer in a timely, efficient, and thorough manner, it is essential that allthe membersstaff of the Assessment teamissuer and staffmembers of the PCIAssessment team understand their specific roles and responsibilities, and participate as needed. The PCIissuer, its facility personnel, and the team responsible for performing the assessment must cooperate and collaborate in a joint manner to ensure the success of the assessment. Specific responsibilities of the assessment team are listed below. For further information, including considerations that an organization may want to take into account when outsourcing assessments, refer to NIST Interagency Report (IR) 7328, Security Assessment Provider Requirements and Customer Responsibilities: Building a Security Assessment Credentialing Program for Federal Information Systems.